ENCODED-DNS
This signature detects an encoded DNS response. This could indicate tunneling data through DNS requests and responses.
Short Name
ENCODED-DNS
Category
Infrastructure
SubCategory
Networking
Risk
5
Release Date
--
Supported Platforms
Available to all SRX running 12.3X48+
Available to all MX running 20.2R1+
Available to all vSRX running 20.3R1+
Port
UDP/1900,TCP/20,TCP/543,TCP/25,TCP/443,445,UDP/443,8000,TCP/465,TCP/21,TCP/1080,TCP/1433,TCP/80,UDP/80,1434,UDP/4500,TCP/587,TCP/53,TCP/554,UDP/88,TCP/102,TCP/22,8080,UDP/5246-5247,3128,UDP/500,UDP/137,TCP/5445,UDP/554,TCP/139,UDP/135,TCP/993,UDP/53,TCP/135,TCP/995
Application Group
junos-approot:applications:vpn-tun