Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 0 subscribers
  • Views 7894 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ERROR condition detected - DNS query latency

Pavana

Hello,

"Responses from the DNS server(s) that the Shophos Web Appliance is using are taking longer than expected (18.0 s), which may result in slower web browsing."

I am continuously getting above alert mails from my Sophos Appliance, plz help me how to correct this

Regards,

Pavana

:14103


This thread was automatically locked due to age.
  • 0

    Hi Pavana,

    It sounds like the primary DNS server that the appliance is using is taking a long time to respond and this will impact web browsing performance.

    • You can check the primary DNS server being used in 'Configuration > Network > Network Interface'.
    • You can also test DNS response times by using the tool in 'Configuration > Network > Diagnostic Tools'.
    • You could use this command on a workstation to test DNS response times as well:  nslookup <website> <dns-server>

    Unfortunately if the primary DNS server is responding slowly, you would need to check this out on the DNS server itself.  In the interim you might want to change to a differant DNS server as primary, which should improve browsing performance.

    Hope this helps.  Good luck :)

    Tom.

    :14131
  • 0

    Further to Tom's comments:

    This alert is generated as follows:

    Every 1 minute, the web appliance measures how long it takes to do an A record lookup (bypassing local cache) for wsa.sophos.com.

    Every 5 minutes, the web appliances takes the last 5 lookup time values, removes the highest value and calculates an average.

    The web appliance looks at the current and the last two average values, if they all exceed one second (three in a roll), then the web appliance sends back a notification.

    In order for these alerts to go away, whichever DNS server you have is taking a long time to resolve wsa.sophos.com.  This would need to be resolved on your end.

    Cheers,

    MarkJD.

    :14141
Unfiltered HTML