Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

DNS Tunneling Client Detection (port 80 non-TCP)



The remote client appears to be a server that is used to tunnel traffic.


The remote client appears to be tunneling traffic over a DNS server. There are a number of DNS tunneling clients that allow internal hosts to bypass firewall and proxy inspection.


Manually inspect both traffic and client to ensure that such usage is in alignment with existing policies and guidelines.