Endpoint Protection

 View Only

  • 1.  DNS Resolution Failure for Insight

    Posted Aug 17, 2015 07:39 AM

    Hi,

    I have a question regarding DNS lookup failures on some Insight Lookups. The event ID in Event Viewer is 1014.

    I know these are lookups for the Symantec Insight Server but why the DNS lookups are failing.

    Below is screenshot:



  • 2.  RE: DNS Resolution Failure for Insight

    Posted Aug 17, 2015 11:36 AM

    Can you re-post the screenshot, it is no displaying.



  • 3.  RE: DNS Resolution Failure for Insight

    Posted Aug 18, 2015 08:51 AM
      |   view attached

    Attached.



  • 4.  RE: DNS Resolution Failure for Insight
    Best Answer

    Posted Aug 18, 2015 10:25 AM

    Hi hamad3914,

    Thanks for the post.  Are there Event ID 1014 events for other sites too or just this one?

    How to verify that a Symantec Endpoint Protection 12.1 client is able to communicate with the Symantec Reputation server
    Article URL: http://www.symantec.com/docs/TECH162219

    Examine local DNS servers within the organization to ensure they are functioning properly.

    Please keep this thread up-to-date with your progress!

    Mick
     



  • 5.  RE: DNS Resolution Failure for Insight

    Posted Aug 18, 2015 10:38 AM

    It was for just this site.

    Also, can you please tell me what you think about disabling these Server lookups ?

    Thanks



  • 6.  RE: DNS Resolution Failure for Insight

    Posted Aug 18, 2015 10:39 AM

    Have you allowed access to the Symantec's Insight servers through your firewall?



  • 7.  RE: DNS Resolution Failure for Insight

    Posted Aug 18, 2015 10:40 AM

    Download Insight would no longer function meaning any downloads would not be scanned. You reduce your security posture by doing this.



  • 8.  RE: DNS Resolution Failure for Insight

    Posted Aug 18, 2015 10:45 AM

    I agree completely- don't disable Download Insight.  It is a powerful defensive tool.

    http://www.symantec.com/tv/products/details.jsp?vid=1323877255001



  • 9.  RE: DNS Resolution Failure for Insight

    Broadcom Employee
    Posted Aug 18, 2015 10:51 AM

    Check through command prompt,  'nslookup ent-shasta-rrs.symantec.com'

    Just now i checked on my test machine & it could resolve host-name successfully. Could you check it again.