Forum Discussion
Low success rate of active name resolution using NetBIOS
bjarneabraham , You can contact support and ask them to request AATP's service engineering to disable netbios resolution completely from the backed for your workspace (provide your tenant id and workspace id).
This will prevent the sensors from even trying to do resolution over netbios, and since they won't even try, after some time the health alert will also go away...
But if at some point you will change your mind and want to bring netbios back, you will need to contact them again to turn it back on.
Microsoftbjarneabraham , This health alert was only recently added to the system, this is why you didn't get it before.
Currently there is no way for you to configure the system to forever suppress this alert.
Generally, having netbios blocked from the sensors reduces the chances of AATP to successfully resolve IP addresses.
The system can probably work just fine without this if other resolution methods we use do a good job on this specific network...
We did get this feedback lately from several channels , and product are aware of this issue.
For now all I can suggest is to ignore it (or make netbios accessible for the sensors)
Eli
- Thank you for the answer.
We look forward to a "ignore for ever" or "disable netbios name resolution check" functionality in the future. For now we will ignore it as we will not enable NetBIOS again.- EliOfek
bjarneabraham , You can contact support and ask them to request AATP's service engineering to disable netbios resolution completely from the backed for your workspace (provide your tenant id and workspace id).
This will prevent the sensors from even trying to do resolution over netbios, and since they won't even try, after some time the health alert will also go away...
But if at some point you will change your mind and want to bring netbios back, you will need to contact them again to turn it back on.
