description-logoDescription

This indicates detection of a Domain Name Service (DNS) message with unknown "class" field.
DNS is a system that translates between human-readable host or domain names (e.g. www.fortinet.com) and machine-understandable Internet Protocol addresses. If the value of the "class" field in the DNS message is not defined in the relevant RFCs, the message is considered to be malformed.

affected-products-logoAffected Products

Any unprotected DNS server may be vulnerable.

Impact logoImpact

This is an anomaly, which may indicate potential attack attempts.

recomended-action-logoRecommended Actions

N/A

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

References

1