Forum Discussion

Copper Contributor

Mar 28, 2019

Azure ATP Health - Low success rate of active name resolution using reverse DNS

Hello! Got an alert about Domain controller health where issue is low success rate of active name resolutiong using reverse DNS: Sensor X, has a low success rate of active name resolution using r...

Mtee-

Copper Contributor

Apr 09, 2019

Tali Ash

Updated the alerting DC to 2019 and installed the ATP sensor to it and it have not alerted now. Can't really say the reason for alerting but it seems to be healthy now with that DC.

But now the earlier updated DC (2019) is alerting about that same thing...

Tali Ash

Former Employee

Apr 10, 2019

Mtee- both DCs are active in the same domain agaist the same computers and DNS servers?

Mtee-
Copper Contributor
Apr 10, 2019
Tali Ash

Yes, both DCs are in the same domain and are also DNS servers with same DNS settings.
- Adrian_Harper
  Copper Contributor
  Oct 15, 2019
  Mtee- Tali Ash
  
  Was any solution found for this, we have 1 of 5 DCs that constantly reports this alert?
  - Mtee-
    Copper Contributor
    Oct 23, 2019
    Adrian_Harper Hi Adrian!
    
    Actually this was not resolved yet. Although everything works in our infra as usual but Azure ATP alerts about those Reverse DNS problems. Also our RODC alerts about RPC and NetBIOS resolving but this is more than likely about firewall issue and not under investigation because we are demoting the RODC.
    
    I have not figured out why the low success of name resolution alerts pop up sometimes and sometimes all seems to be ok.