topic Re: Palo Alto with MDM DNS Filtering in General Topics

Palo Alto with MDM DNS Filtering

MFacella1 — Wed, 25 Jan 2023 19:15:30 GMT

Hi,

I need to have our Palo Alto firewall v 10.1.6 working with our MDM DNS filtering. When the MDM filtering is enabled users are not able to get outside to the internet. Thanks for any assistance

Marc

Re: Palo Alto with MDM DNS Filtering

BPry — Thu, 26 Jan 2023 03:39:06 GMT

@MFacella1,

This is missing almost anything for someone to help you troubleshoot. You don't mentioned what MDM you're using, or anything that you've actually done to try and troubleshoot the issue.

If I had to take a wild guess with the information supplied, verify that you're actually allowing the DNS traffic from your clients to wherever your MDM is attempting to send the traffic.

Re: Palo Alto with MDM DNS Filtering

nikoolayy1 — Tue, 31 Jan 2023 20:53:45 GMT

As @BPry mentioned there is no info to investigate. My wild suggestion will be the HIP profile check that the devices are matching after the MDM is enabled so do a security policy trace https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cla1CAC , https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/mobile-endpoint-management/set-up-a-mobile-endpoint-management-system