DNS Proxy Functionality does not work

cfpa — Thu, 12 Jul 2012 06:45:37 GMT

Hi all,

i want to use the dns-proxy functionality of the palo alto to do the following:

Software Versiob 4.0./ here.

1. Proxy dns request for guests

2. Reply to 2 speciel reverse lookups with names which i configure on the palo alto

What i did already:

-> Enabled DNS Proxy

-> Entered the primary and secondary DNS Server in the proxy dns seetup

-> Entered 2 static entries for the 2 records which i want to have resolved by the pa

-> Added interface 1/x in the proxy dns setup

->Allowed dns traffic from the guest clients to the pa interface 1/x

->Allowed dns traffic from the pa internet interface to the official dns servers

BUT, the clients are not able to get any dns resolution.

What am i doing wrong ?

Is it even possible to do what i want ?

Many thanks,

Christian

Re: DNS Proxy Functionality does not work

nayubi — Mon, 16 Jul 2012 18:58:21 GMT

Please check to see if you are using EDNS. If so it is not supported by the pan in the DNS proxy function as of yet.