Summary
In some Linux distributions protected by Deep Security Agent, the DNS query is very slow. This affects the Web Reputation Service (WRS) function and Anti-Malware function if the Smart Protection mode is enabled.
Details
By default, glibc simultaneously performs IPv4 and IPv6 lookups starting on version 2.9. Some appliance DNS servers cannot properly handle these queries and make request time out. For more details, refer to the Linux Programmer's Manual.
To resolve the issue, do one of the following:
- For Linux host using static IP, add "options single-request" in /etc/resolv.conf.
- For Linux host using DHCP, add "RES_OPTIONS=single-request" in /etc/sysconfig/network (RHEL-like platforms).
