Untrusted DNS Server incidents in SEP Mobile

Products

• Endpoint Protection Mobile

Issue/Introduction

You've had a SEP Mobile incident for Untrusted DNS Server and would like more information.

Environment

iOS and Android mobile devices

Cause

SEP Mobile detected a DNS resolution that did not resolve to a known IP address.

Resolution

Frequently these events resolve themselves. This can be because the DNS server or the device has an old IP address cached and the DNS record has been updated.

If the incident persists, investigate your DNS server for signs of compromise.

SEP Mobile protects your device using your configured Protection Actions

Additional Information

Information about the reasoning behind the Untrusted DNS server event can be found in the February 2019 update.