(PVS) Signatures - Tenable Network Security

DNS Tunneling Client Detection (HTTP)
PVS ID: 4970 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote client appears to be tunneling traffic over a DNS server. There are a number of
DNS tunneling clients that allow internal hosts to bypass firewall and proxy inspection. As
an example, consider the following observed DNS query: %L
realtime
Solution: Manually inspect both traffic and client to ensure that such usage is in alignment with
existing policies and guidelines.
CVE Not available
DNS Tunneling Server Detection (HTTP)
PVS ID: 4971 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote client appears to be a server that is used to tunnel traffic. There are a number of
DNS tunneling clients that allow internal hosts to bypass firewall and proxy inspection. As
an example, consider the following observed DNS query: %P\n\nFollowed by the
following DNS response: %L
realtime
Solution: Manually inspect both traffic and client to ensure that such usage is in alignment with
existing policies and guidelines.
CVE Not available
DNS Tunneling Server Detection (HTTP)
PVS ID: 4972 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote client appears to be a server that is used to tunnel traffic. There are a number of
DNS tunneling clients that allow internal hosts to bypass firewall and proxy inspection. As
an example, consider the following observed DNS query: %P\n\nFollowed by the
following DNS response: %L
realtime
Solution: Manually inspect both traffic and client to ensure that such usage is in alignment with
existing policies and guidelines.
CVE Not available
Synergy Protocol Server Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4973 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Family Internet Services 1313