Cisco Cisco Firepower Management Center 2000

You can enable rule 131:2 to generate events for this option. See 

 for 

more information.

Protection

Use the following procedure to configure the DNS preprocessor. For more information on configuring 
the options on this page, see 

, 

.

Admin/Intrusion Admin

Select 

The Intrusion Policy page appears.

Click the edit icon (

) next to the policy you want to edit.

If you have unsaved changes in another policy, click 

 to discard those changes and continue. See 

 for information on saving unsaved changes in another 

policy.

The Policy Information page appears.

Click 

 in the navigation panel on the left.

The Advanced Settings page appears.

You have two choices, depending on whether 

 under Application Layer Preprocessors 

is enabled:

If the configuration is enabled, click 

.

If the configuration is disabled, click 

, then click 

.

The DNS Configuration page appears. A message at the bottom of the page identifies the intrusion policy 
layer that contains the configuration. See 

 for more 

information.

Optionally, you can modify any of the following in the 

 area:

Specify the source port or ports the DNS preprocessor should monitor for DNS server responses in 
the 

 field. Separate multiple ports with commas.

Select the 

 

 

check box to enable detection of buffer overflow 

attempts in RData text fields. 

7

MB

a mailbox domain name

8

MG

a mail group member

9

MR

a mail rename domain name

10

NUL

a null resource record