article Nominated Discussion: Unable to Resolve FQDN After Upgrading PAN-OS in General Articles

article Nominated Discussion: Unable to Resolve FQDN After Upgrading PAN-OS in General Articles https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-unable-to-resolve-fqdn-after-upgrading-pan/ta-p/508935 <DIV class="lia-message-template-content-zone"> <P data-unlink="true"><STRONG><EM><I data-stringify-type="italic">This article is based on a discussion,<SPAN><FONT color="#FF6600"> <A href="https://live.paloaltonetworks.com/t5/general-topics/unable-to-resolve-fqdn-after-upgrading-pan-os-to-10-1-5-quot/m-p/504164" target="_self">Unable to resolve FQDN after upgrading PAN OS to 10.1.5 - " ping: unknown host FQDN"</A></FONT>,</SPAN></I><I data-stringify-type="italic"> posted by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/202600">@Shakemustafa</a></I><I data-stringify-type="italic">.</I><I data-stringify-type="italic"> Read on to see the discussion and solution!</I></EM></STRONG></P> <P> </P> <BLOCKQUOTE> <P>We have recently upgraded PA-820 to PA-OS 10.1.5. After that, we observed we cannot resolve any FQDN from the firewall.</P> <P> </P> <P>*. We have verified the DNS setting Device>Setup>Services> Primary as 8.8.8.8 and local. </P> <P>*. We have tested by changing the service route of DNS to LAN, WAN, and default and allowed complete access in policy still no use.</P> <P>*. We have restarted MGMT server and DNS-Proxy process but still, no use getting errors as " ping: unknown host FQDN" </P> <P>* Also observed it is working file in machines behind this firewall. Only unable to resolve from firewall CLI.</P> <P> </P> <P>Can anyone please help me to address this issue.</P> </BLOCKQUOTE> <P> </P> <P>This behavior is observed on PAN 10.1.6. There is no target fix for this bug at the moment of this writing.</P> <P> </P> <P>As the resolution is either remove the domain name (if not required) and if required then there should not be any space.<BR />The issue was due to invalid domain string name configured on the firewall under General setting>>Domain.</P> <P> </P> <P><STRONG>Device --> Setup --> Management --> General Settings --> Domain --></STRONG></P> <P> </P> <span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="Device > Setup > Management > General Settings > Domain" style="width: 480px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/42470i68B5310E13569D0B/image-size/large?v=v2&px=999" role="button" title="kiwi_0-1657786833767.png" alt="Device > Setup > Management > General Settings > Domain" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Device > Setup > Management > General Settings > Domain</span></span> <P> </P> <P> </P> <P> </P> <P>+We removed the domain and issue got fixed.</P> <P> </P> <P>Recently there was a fix added to validate all hostname/domain name strings from sysdagent. Hence quite possible that this string was accepted in earlier versions.</P> </DIV> Tue, 19 Jul 2022 16:01:15 GMT kiwi 2022-07-19T16:01:15Z Nominated Discussion: Unable to Resolve FQDN After Upgrading PAN-OS https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-unable-to-resolve-fqdn-after-upgrading-pan/ta-p/508935 <P> </P> <DIV id="ConnectiveDocSignExtentionInstalled" data-extension-version="1.0.4"> </DIV> Tue, 19 Jul 2022 16:01:15 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-unable-to-resolve-fqdn-after-upgrading-pan/ta-p/508935 kiwi 2022-07-19T16:01:15Z