https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-proxy-vs-management-dns-queries/m-p/1240041#M6398 <P>Hi,<BR />We have a fw on 11.1.12 and we are seeing behaviour we don't expect.<BR />The management is set to use an internal dns server.<BR />We have proxy-dns objects that use EXTERNAL dns servers for our public wifi network.<BR />We see that when a client on this network wants to resolve an ip the gateway sends the request to the external dns. So far so good.<BR />However we see that the management interface now also starts to do dns queries to that public dns server.&nbsp;<BR />Is that normal behaviour? In what case would the management need to query the external dns? Does it update entries based on the source of the information?&nbsp;<BR /><BR /><BR /><BR /></P> Wed, 15 Oct 2025 09:02:11 GMT tomdevos-D09 2025-10-15T09:02:11Z https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-proxy-vs-management-dns-queries/m-p/1240041#M6398 <P>Hi,<BR />We have a fw on 11.1.12 and we are seeing behaviour we don't expect.<BR />The management is set to use an internal dns server.<BR />We have proxy-dns objects that use EXTERNAL dns servers for our public wifi network.<BR />We see that when a client on this network wants to resolve an ip the gateway sends the request to the external dns. So far so good.<BR />However we see that the management interface now also starts to do dns queries to that public dns server.&nbsp;<BR />Is that normal behaviour? In what case would the management need to query the external dns? Does it update entries based on the source of the information?&nbsp;<BR /><BR /><BR /><BR /></P> Wed, 15 Oct 2025 09:02:11 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/dns-proxy-vs-management-dns-queries/m-p/1240041#M6398 tomdevos-D09 2025-10-15T09:02:11Z