You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/defender-for-iot/organizations/how-to-manage-individual-sensors.md
-28Lines changed: 0 additions & 28 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -359,34 +359,6 @@ To restore a backup from the sensor console, the backup file must be accessible
359
359
360
360
---
361
361
362
-
## Reduce DNS alerts
363
-
364
-
*Learn* unauthorized internet alerts in bulk by FQDN - fully qualified domain names - to reduce the noise of triggered internet alerts in the OT network.
365
-
366
-
By defining an FQDN allowlist, the system checks each instance of unauthorized internet connectivity attempt against it. If the FQDN is included in the allowlist, then the network will *learn* this alert automatically without triggering it.
367
-
368
-
The FQDN list will remain intact through version upgrades.
369
-
370
-
**To define an FQDN allowlist:**
371
-
372
-
1. Sign in to your OT network sensor console as the **support**[user](references-work-with-defender-for-iot-cli-commands.md), then select **Support**.
373
-
374
-
1. In the search bar, search for "DNS", then look for "Internet Domain Allowlist" under **Description**.
375
-
376
-
:::image type="content" source="media/how-to-manage-individual-sensors/dns-edit-configuration.png" alt-text="Screenshot of how to edit configurations for DNS in the sensor console." lightbox="media/how-to-manage-individual-sensors/dns-edit-configuration.png":::
377
-
378
-
1. Select the :::image type="icon" source="media/how-to-generate-reports/manage-icon.png" border="false"::: icon under **Edit**.
379
-
380
-
1. In the **Edit configuration** pane, enter a domain name that you don't want the sensor to trigger alerts for, then select **Submit**.
381
-
382
-
You can view to the FQDN allowlist in the advanced configurations and in a [data mining report](how-to-create-data-mining-queries.md). A custom Data mining report will present the FQDN, IP addresses, and last resolution time.
383
-
384
-
**To view in a data mining report:**
385
-
386
-
[Create a custom data mining report](how-to-create-data-mining-queries.md#create-an-ot-sensor-custom-data-mining-report) and make sure to select **Internet Domain Allowlist** under **DNS** when choosing a category in the **Create new report** pane.
387
-
388
-
:::image type="content" source="media/how-to-manage-individual-sensors/data-mining-allowlist.png" alt-text="Screenshot of how to create a custom data mining report to show fqdn allowlist in the sensor console." lightbox="media/how-to-manage-individual-sensors/data-mining-allowlist.png":::
389
-
390
362
## Configure SMTP settings
391
363
392
364
Define SMTP mail server settings for the sensor so that you configure the sensor to send data to other servers.
0 commit comments