https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-servers-failure/m-p/1231971#M5997 <P data-start="63" data-end="226">In the Palo Alto firewall, we are <STRONG data-start="97" data-end="132">unable to reach the DNS servers</STRONG>. These servers are in the cloud and act as <STRONG data-start="176" data-end="223">proxy servers as well as domain controllers</STRONG>.</P> <P data-start="228" data-end="368">From our VMs, we are <STRONG data-start="249" data-end="290">able to ping the DNS IPs successfully</STRONG>, but in the <STRONG data-start="303" data-end="328">firewall session logs</STRONG>, it shows <STRONG data-start="339" data-end="366">"resource unavailable."</STRONG></P> <P data-start="370" data-end="525">Note that the <STRONG data-start="384" data-end="447">same configuration is working on another Palo Alto firewall</STRONG>, where it is able to reach the DNS servers from the assets without any issue.</P> Tue, 17 Jun 2025 21:41:30 GMT pr45031 2025-06-17T21:41:30Z https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-servers-failure/m-p/1231971#M5997 <P data-start="63" data-end="226">In the Palo Alto firewall, we are <STRONG data-start="97" data-end="132">unable to reach the DNS servers</STRONG>. These servers are in the cloud and act as <STRONG data-start="176" data-end="223">proxy servers as well as domain controllers</STRONG>.</P> <P data-start="228" data-end="368">From our VMs, we are <STRONG data-start="249" data-end="290">able to ping the DNS IPs successfully</STRONG>, but in the <STRONG data-start="303" data-end="328">firewall session logs</STRONG>, it shows <STRONG data-start="339" data-end="366">"resource unavailable."</STRONG></P> <P data-start="370" data-end="525">Note that the <STRONG data-start="384" data-end="447">same configuration is working on another Palo Alto firewall</STRONG>, where it is able to reach the DNS servers from the assets without any issue.</P> Tue, 17 Jun 2025 21:41:30 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-servers-failure/m-p/1231971#M5997 pr45031 2025-06-17T21:41:30Z https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-servers-failure/m-p/1232163#M6002 <P>Try to create an application override for this traffic, that should work! <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Fri, 20 Jun 2025 02:53:26 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-servers-failure/m-p/1232163#M6002 jfernandez1 2025-06-20T02:53:26Z