Direct DNS Resolution on Palo Alto Without DNS Proxy Enabled

DalilaOuldYounes — Thu, 09 Jan 2025 16:55:55 GMT

Hello,

It is possible to perform a DNS resolution directly from the Palo Alto firewall without relying on the current network configuration (such as the default configured DNS). The idea is to bypass internal DNS and use a public DNS directly, such as 8.8.8.8. Note that the DNS proxy is not enabled because it is not being used.

Thanks

Re: Direct DNS Resolution on Palo Alto Without DNS Proxy Enabled

ozheng — Fri, 10 Jan 2025 04:25:10 GMT

Hello @DalilaOuldYounes ,

If you don't have the DNS proxy configured on the interface to respond to the DNS queries, no.

Olivier

topic Re: Direct DNS Resolution on Palo Alto Without DNS Proxy Enabled in Next-Generation Firewall Discussions

Direct DNS Resolution on Palo Alto Without DNS Proxy Enabled

Re: Direct DNS Resolution on Palo Alto Without DNS Proxy Enabled