https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-proxy/m-p/539203#M1158 <P>When you create DNS Proxy change "Location" to "Shared".</P> <P>This allows to type Primary and Secondary DNS servers right into same box and don't require Server Profile.</P> Tue, 18 Apr 2023 13:33:31 GMT Raido_Rattameister 2023-04-18T13:33:31Z https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-proxy/m-p/539167#M1155 <P>Hey,</P> <P>&nbsp;</P> <P>i am configuring an isolated Vlan and i need some static DNS entries to be "supplied" to the clients instead exposing our internal dns servers.</P> <P>i thought about using the DNS Proxy feature, but i seam to be stucked.</P> <P>1) when DNS Proxy is enabled, is it enabled across all interfaces and if a client configure the FW's IP as a DNS the PA should resolve it on the interface?&nbsp;</P> <P>2) i have configured the DNS proxy with the following configuration but i am always geting an error:</P> <LI-CODE lang="markup">Validation Error: dns-proxy -&gt; MyDNSProxy -&gt; server-profile 'MyDNSProfile' is not a valid reference dns-proxy -&gt; MyDNSProxy -&gt; server-profile is invalid No DNS default obj found (Module: dnsproxyd) client dnsproxyd phase 1 failure Commit failed</LI-CODE> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="DorMarcovitch_0-1681807912675.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/49592iF62876BE5E088B6B/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="DorMarcovitch_0-1681807912675.png" alt="DorMarcovitch_0-1681807912675.png" /></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="DorMarcovitch_1-1681808292449.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/49593iF70D96190341FB69/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="DorMarcovitch_1-1681808292449.png" alt="DorMarcovitch_1-1681808292449.png" /></span></P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Tue, 18 Apr 2023 08:58:36 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-proxy/m-p/539167#M1155 DorMarcovitch 2023-04-18T08:58:36Z https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-proxy/m-p/539203#M1158 <P>When you create DNS Proxy change "Location" to "Shared".</P> <P>This allows to type Primary and Secondary DNS servers right into same box and don't require Server Profile.</P> Tue, 18 Apr 2023 13:33:31 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-proxy/m-p/539203#M1158 Raido_Rattameister 2023-04-18T13:33:31Z