topic Re: EDNS Support in General Topics

EDNS Support

jclimer — Thu, 04 Sep 2014 15:17:07 GMT

In the recent code releases has support for EDNS been added...If so, what release and can you point me in the direction of a good EDNS tech doc?!!

Thank you in advanced,

-jc

Re: EDNS Support

bat — Thu, 04 Sep 2014 15:21:25 GMT

Hi jclimer

I don't think it is supported yet. You can go through the following threads that discuss the same:

EDNS?

EDNS0 Packet blocked

As mentioned in the above threads there is FR ID: 2315 on which you can ask your SE to vote so that it can be included in future releases.

Thanks

Re: EDNS Support

ukhapre — Tue, 09 Sep 2014 00:11:05 GMT

another thread EDNS?

Re: EDNS Support

cpainchaud — Tue, 09 Sep 2014 17:29:17 GMT

my company was using DNSSEC for 2 years and was running PANW to secure its DMZ without a problem. Considering that DNSSEC uses EDNS I suppose it should flow through your PANW device without a problem.

Re: EDNS Support

HULK — Tue, 09 Sep 2014 17:44:37 GMT

Hello Cpainchaud,

The above mentioned discussion thread is, if the PAN firewall itself is configured for DNS-Proxy and implementation of DNS-Proxy does not support EDNS. But, EDNS traffic will flow through the PAN firewall without any issue.

Thanks

Re: EDNS Support

cpainchaud — Tue, 09 Sep 2014 18:02:13 GMT

Oh ok ... Sorry I've not seen any mention to dns-proxy here.