Forum Discussion
Azure ATP Health - Low success rate of active name resolution using reverse DNS
Adrian_Harper Hi Adrian!
Actually this was not resolved yet. Although everything works in our infra as usual but Azure ATP alerts about those Reverse DNS problems. Also our RODC alerts about RPC and NetBIOS resolving but this is more than likely about firewall issue and not under investigation because we are demoting the RODC.
I have not figured out why the low success of name resolution alerts pop up sometimes and sometimes all seems to be ok.
- EliOfek
Microsoft
Joshua Kolka , Yes, there is, but it's better to open a support case and have an experienced engineer walk you through the process.
IT is unlikely that other app will experience the same issue, they are most likely not trying to do the same thing as the sensor...
Generally, the engineer will walk you through checking some common issues, then capturing some network traces, and if it's not enough, they can ask for a log level increase for a few hours so the sensors will give more info about where the problems are.
EliOfek Is there something to get better logging or understanding of how to resolve. We just had the same thing come up to 4 domain controllers in our environment all at the same time and vastly different locations. No work is being done at theses sites as far as I am aware. End users and app teams are not complaining on any issues at all.
Mtee-
Reinstalling the sensor on the DC in question seems to have stopped the issue for us.I spoke too soon, the issue has reoccurred this morning after a number of days without error.
