topic Resolve wildcard FQDN by PA in General Topics

Resolve wildcard FQDN by PA

Mishin — Thu, 06 Oct 2022 10:47:07 GMT

Hello!

I have a PA OS 10.2. PA act as DHCP server and DNS server for local clients. I have several ststic entries wich resolve my local domains name in IP. For instance, example.local is 10.10.10.10.

What should I do that PA will resolve wildcard FQDN for DHCP and DNS clients. I want to resolve *.example.local in one IP address. Is it possible?

Re: Resolve wildcard FQDN by PA

JayGolf — Fri, 07 Oct 2022 01:05:16 GMT

Hello @Mishin ,

Thanks for. your question. I'd like to understand more about your issue. When you say the Palo Alto is acting as a DNS server for your clients, do you mean you have setup DNS proxy on the Palo? If you configure a DNS Proxy Rule , wildcards are accepted for a Domain. Here is a techdoc explaining how the Firewall is able to resolve wildcard domains.