topic Re: Benefits of using DNS Proxy? in General Topics

Benefits of using DNS Proxy?

craymond — Tue, 14 Jan 2014 21:52:50 GMT

Are there any Security benefits to using the current implementation of DNS proxy on the PAN? I have seen on the ver 6.0, a new feature called DNS sinkhole, but I don't think it will require the DNS proxy feature. Watchguard checks DNS headers and a couple of other criteria for DNS based attacks, but I don't see anything in PAN documentation that says the PAN Firewall does anything when used a DNS proxy.

Any thoughts?

Re: Benefits of using DNS Proxy?

Retired Member — Wed, 15 Jan 2014 22:42:31 GMT

Cache, static entries, etc... But not the one like DNS sinkhole, it is different and it is a security feature..

Re: Benefits of using DNS Proxy?

pulukas — Fri, 17 Jan 2014 01:22:19 GMT

You are correct, the dns proxy feature is a performance feature and not a security feature.

Re: Benefits of using DNS Proxy?

KiCheon.Lee — Wed, 05 Feb 2014 10:09:44 GMT

If FW is set up DNS proxy configuration, fw needs to have U-Turn NAT configuration?

May I disable U-Turn NAT rules?

Thanks.

Re: Benefits of using DNS Proxy?

_slv_ — Wed, 05 Feb 2014 11:18:17 GMT

U-turn - no, but You need policy like:

to allow DNS traffic

Regards

SLawek

Re: Benefits of using DNS Proxy?

Retired Member — Wed, 05 Feb 2014 11:21:05 GMT

if you use fqdn you'll not need.bu if you'll access with ip, you will.

Re: Benefits of using DNS Proxy?

Gregoux — Wed, 05 Feb 2014 13:23:31 GMT

Hello

the DNS sinkholing is not implemented by the DNS PROXY.

the DNS sinkholing is implemented by antispyware profile

regard's

Re: Benefits of using DNS Proxy?

msullivan — Wed, 05 Feb 2014 20:41:51 GMT

I think it depends on your policy. If you do not have a rule that dictates what the valid upstream resolvers are, the proxy could provide that same benefit. It could also help with split dns issues.

Cheers,

Mike