DNS activity details

The DNS Activity report allows you to review DNS activity that's directed to ETP and ETP Proxy.

DNS activity appears in a table. After you select a filter and dimension, you can select the type of data that you want to show in the table. In addition to data listed in the DNS activity dimensions topic, you can show this data in the activity table.

Note: You must be an ETP administrator or a user with a specific permission to view the DNS Activity report. For more information, see Enterprise Threat Protector roles.
Detail Description
Query Time Date and time the query was detected.
Observed AUP categories The acceptable use policy (AUP) category or application visibility and control (AVC) category that’s associated with the activity.
On Ramp Indicates whether traffic was forwarded to ETP Proxy. This field shows Yes or No.
Hit Count Number of requests to the associated domain.
Alexa Ranking Indicates the specific Alexa list where the domain or website is ranked. These lists include the top 10, 100, 1K, 10K, 100K, or one million websites that Alexa Internet, Inc. publishes as most popular on the Internet.
ASN Autonomous System Number. A unique number that identifies a network.
List Shows the list that is associated with the DNS activity.
Client Agents String for HTTP-based traffic that includes details about the end user's browser and system, such as the browser, browser version, operating system, command line tools, version of ETP Client, and more.
Resolved IP Type DNS resource record type associated with the resolved IP address.