For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Depthcharge_343's avatar
Depthcharge_343
Icon for Nimbostratus rankNimbostratus
Apr 21, 2019

Sea Turtle DNS Hijack

Hi All,   Does GTM has any impact on the Sea Turtle DNS Hijack?   Does is have a mechanism to alert any modification or change in the record?   Regards, Gokul  
BIG-IP DNS
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Apr 23, 2019

in which way are you using the BIG-IP DNS (former GTM) when asking this question?

 

if it is a DNS resolver for your clients then you don't want to be informed of every IP change on every DNS record, because that just happens when a website changes hosting provider or with DNS load balancing or ...

 

if it is a DNS server, then you should just use strong passwords and make sure admin access is tightly restricted. those attackers did nothing special, just gain admin access to DNS servers to change records.

 

and look into implementing DNSSEC.