This message was deleted.
# _generals
Slackbot
10/28/2022, 11:41 AMThis message was deleted.
r
Ryan Gallier
10/28/2022, 12:56 PMSounds like someone is missing the trailing "." in DNS.
Ryan Gallier
10/28/2022, 12:57 PMbut, that's a DNS thing, this might be some form of setting in your specific proxy
j
Josh Jordan
10/31/2022, 1:09 PMSo update, Ivanti is doing it. Our team that manages that has seen some turnover and man the prod policy is in rough shape. So we open Wireshark, refresh google or something after flushing dns, we get like 10 packets maybe. Re-enable Ivanti App manager and it just FLOODs with DNS requests. Our networking team said we get like 60k "malformed" requests per proxy per day from this traffic.
Josh Jordan
10/31/2022, 1:15 PMThey said something about URL elevation (not sure what that even means) and it using its own mini DNS lookup (using the console maybe?) and if they can't check in they just flood with traffic