Forum Discussion
Mtee-
Mar 28, 2019Copper Contributor
Azure ATP Health - Low success rate of active name resolution using reverse DNS
Hello! Got an alert about Domain controller health where issue is low success rate of active name resolutiong using reverse DNS: Sensor X, has a low success rate of active name resolution using r...
Mtee-
Apr 10, 2019Copper Contributor
Adrian_Harper
Oct 15, 2019Brass Contributor
Was any solution found for this, we have 1 of 5 DCs that constantly reports this alert?
- Mtee-Oct 23, 2019Copper Contributor
Adrian_Harper Hi Adrian!
Actually this was not resolved yet. Although everything works in our infra as usual but Azure ATP alerts about those Reverse DNS problems. Also our RODC alerts about RPC and NetBIOS resolving but this is more than likely about firewall issue and not under investigation because we are demoting the RODC.
I have not figured out why the low success of name resolution alerts pop up sometimes and sometimes all seems to be ok.
- EliOfekOct 23, 2019
Microsoft
Mtee- , the alerts pops if your daily failure rate exceeds a certain percentage (90% if I am not mistaken). it could be that normally you are borderline, so sometimes you exceed it and sometimes not...
- Joshua KolkaNov 07, 2019Copper Contributor
EliOfek Is there something to get better logging or understanding of how to resolve. We just had the same thing come up to 4 domain controllers in our environment all at the same time and vastly different locations. No work is being done at theses sites as far as I am aware. End users and app teams are not complaining on any issues at all.
- Adrian_HarperOct 23, 2019Brass Contributor
Mtee-
Reinstalling the sensor on the DC in question seems to have stopped the issue for us.I spoke too soon, the issue has reoccurred this morning after a number of days without error.