search cancel

Untrusted DNS Server incidents in SEP Mobile

book

Article ID: 212400

calendar_today

Updated On:

Products

Endpoint Protection Mobile

Issue/Introduction

You've had a SEP Mobile incident for Untrusted DNS Server and would like more information.

Cause

SEP Mobile detected a DNS resolution that did not resolve to a known IP address (eg mgt.skycure.com resolved to an unexpected IP address).

Environment

iOS and Android mobile devices

Resolution

Frequently these events resolve themselves. This can be because the DNS server or the device has an old IP address cached and the DNS record has been updated.

If the incident persists, investigate your DNS server for signs of compromise.

SEP Mobile protects your device using your configured Protection Actions

Additional Information

Information about the reasoning behind the Untrusted DNS server event can be found in the February 2019 update.