Configure USM Appliance to Use a DNS

Applies to Product: USM Appliance™ LevelBlue OSSIM®

Use of a Domain Name Service (DNS) helps USM Appliance to resolve host names against IP addresses. When processing logs from different assets An IP-addressable host, including but not limited to network devices, virtual servers, and physical servers., or hosts, to generate events Any traffic or data exchange detected by LevelBlue products through a sensor or external devices such as a firewall., if the IP address of the asset can be identified, USM Appliance stores it in the Device IP field of the event. This enriches the event data, making searches faster and more accurate. When USM Appliance is not able to resolve the host name, it assigns the IP address of the USM Appliance Sensor to the Device IP field instead.

To configure USM Appliance to use a DNS

  1. Connect to the LevelBlue Console through SSH and use your credentials to log in.

    The LevelBlue Setup menu displays.

  2. Select System Preferences.
  3. Select Configure Network.
  4. Select Name Server (DNS).

  5. Type the IP address of the server you want to use. If using more than one server, separate them with a comma without any spaces. For example:

    1.1.1.1,8.8.8.8

  6. Press Enter (<OK>).
  7. Press <Back> until you are on the LevelBlue Setup menu again. Select Apply all Changes.

  8. Press <Yes> to confirm.

    USM Appliance applies the changes and restarts all the services, which may take several minutes.