Documentation

GET /service/api/console/gsm/{gsmKey}/sites/{siteId}/dnsp/blockedtraffic
?startDate={startDate}
&endDate={endDate}
&pageSize={pageSize}
&pageNr={pageNr}

Returns information about DNS requests that were blocked by the DNS Protection service.

NOTE: The maximum allowed time difference between 'startDate' and 'endDate' is 30 days.

WARNING: The maximum number of returned traffic records is limited to ensure that requests can complete in reasonable time. The amount of data accumulating over an increasing timespan can become very large, reaching into the millions of records for the maximum allowed time interval of 30 days. When querying blocked traffic for high-use sites, it is advised to query more regularly for shorter periods of time, instead of trying to pull the entire data once per month only.

Request Information

URI Parameters

Name	Description	Type	Additional Information
gsmKey	The GSM console keycode.	string	Required
siteId	The site identifier.	string	Required
startDate	If specified, returns blocked requests after (or at) the given date. If omitted, defaults to 'endDate' minus 24 hours.	date	None.
endDate	If specified, returns blocked requests before (or at) the given date. If omitted, defaults to the current date and time.	date	None.
pageSize	Specifies the maximum number of records to return. Valid values are between 100 and 10000.	integer	Default value is 1000
pageNr	Specifies the page number. Can be used to retrieve the next batch of records.	integer	Default value is 1

URI Sample(s)

GET	https://unityapi.webrootcloudav.com/service/api/console/gsm/84A4-31D6-D787-4C44-9E62/sites/13ac03ff-9199-4d1a-b5a7-2e1d116fc07d/dnsp/blockedtraffic?startDate=2020-12-27T15:26:18.3110951Z&endDate=2021-01-26T15:26:18.3110951Z&pageSize=100&pageNr=28

Body Parameters

None.

Response Information

Resource Description

Information about DNS requests that were blocked by the DNS Protection service.

GetDNSPBlockedTrafficResponseModel

Name	Description	Type	Additional Information
MoreAvailable	Value indicating whether more records are available in the queried time window. Increment the page number in the query to obtain additional blocked request records.	boolean	None.
PageNr	The number of the page that was requested.	integer	None.
PageSize	The size of the page that was requested.	integer	None.
StartDate	The start date that was used for the data query.	date	None.
EndDate	The end date that was used for the data query.	date	None.
SiteId	The identifier of the GSM site traffic information was queried for.	string	None.
SiteName	The name of the GSM site traffic information was queried for.	string	None.
BlockedRequests	The list of blocked request records.	Collection of GetDNSPBlockedTrafficResponseModel_DNSRequest	None.

{
  "MoreAvailable": false,
  "PageNr": 1,
  "PageSize": 1000,
  "StartDate": "2021-01-25T20:32:20.4147224Z",
  "EndDate": "2021-01-26T20:32:20.4147224Z",
  "SiteId": "d3cfd08b-e660-4439-9911-ce9ba1598593",
  "SiteName": "Site 1",
  "BlockedRequests": [
    {
      "Timestamp": "2021-01-26T20:31:20.4147224Z",
      "HostName": "MyComputer1",
      "UserName": "User1",
      "AgentVersion": "1.2.1.28",
      "SourceIp": "95.199.114.57",
      "Domain": "www.blocked-domain1.com",
      "DomainIps": [
        "95.134.13.187",
        "95.105.122.2"
      ],
      "CategoryIds": [
        50,
        57
      ],
      "BlockReasonId": 1
    },
    {
      "Timestamp": "2021-01-26T20:30:20.4147224Z",
      "HostName": "MyComputer2",
      "UserName": "User2",
      "AgentVersion": "1.2.1.28",
      "SourceIp": "95.199.84.198",
      "Domain": "www.blocked-domain2.com",
      "DomainIps": [
        "95.51.16.200",
        "95.159.232.199"
      ],
      "CategoryIds": [
        51,
        58
      ],
      "BlockReasonId": 1
    }
  ]
}

<GetDNSPBlockedTrafficResponseModel xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.datacontract.org/2004/07/Webroot.UnityAPI.ServiceExtension.Console.Models">
  <BlockedRequests>
    <GetDNSPBlockedTrafficResponseModel_DNSRequest>
      <AgentVersion>1.2.1.28</AgentVersion>
      <BlockReasonId>1</BlockReasonId>
      <CategoryIds xmlns:d4p1="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
        <d4p1:int>50</d4p1:int>
        <d4p1:int>57</d4p1:int>
      </CategoryIds>
      <Domain>www.blocked-domain1.com</Domain>
      <DomainIps xmlns:d4p1="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
        <d4p1:string>95.134.13.187</d4p1:string>
        <d4p1:string>95.105.122.2</d4p1:string>
      </DomainIps>
      <HostName>MyComputer1</HostName>
      <SourceIp>95.199.114.57</SourceIp>
      <Timestamp>2021-01-26T20:31:20.4147224Z</Timestamp>
      <UserName>User1</UserName>
    </GetDNSPBlockedTrafficResponseModel_DNSRequest>
    <GetDNSPBlockedTrafficResponseModel_DNSRequest>
      <AgentVersion>1.2.1.28</AgentVersion>
      <BlockReasonId>1</BlockReasonId>
      <CategoryIds xmlns:d4p1="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
        <d4p1:int>51</d4p1:int>
        <d4p1:int>58</d4p1:int>
      </CategoryIds>
      <Domain>www.blocked-domain2.com</Domain>
      <DomainIps xmlns:d4p1="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
        <d4p1:string>95.51.16.200</d4p1:string>
        <d4p1:string>95.159.232.199</d4p1:string>
      </DomainIps>
      <HostName>MyComputer2</HostName>
      <SourceIp>95.199.84.198</SourceIp>
      <Timestamp>2021-01-26T20:30:20.4147224Z</Timestamp>
      <UserName>User2</UserName>
    </GetDNSPBlockedTrafficResponseModel_DNSRequest>
  </BlockedRequests>
  <EndDate>2021-01-26T20:32:20.4147224Z</EndDate>
  <MoreAvailable>false</MoreAvailable>
  <PageNr>1</PageNr>
  <PageSize>1000</PageSize>
  <SiteId>d3cfd08b-e660-4439-9911-ce9ba1598593</SiteId>
  <SiteName>Site 1</SiteName>
  <StartDate>2021-01-25T20:32:20.4147224Z</StartDate>
</GetDNSPBlockedTrafficResponseModel>

GET /service/api/console/gsm/{gsmKey}/sites/{siteId}/dnsp/blockedtraffic ?startDate={startDate} &endDate={endDate} &pageSize={pageSize} &pageNr={pageNr}