topic Re: Palo Alto as a DNS Server in General Topics

Palo Alto as a DNS Server

RustyPA — Sat, 13 Aug 2016 20:52:07 GMT

I have a very small network without a DNS server and I'd like to if possible use a PA200 as a DNS server. I want to try to create static DNS entries for a few hosts on the PA, then point those hosts to the PA as their DNS server. Does this work? Any caveats?

Re: Palo Alto as a DNS Server

TranceforLife — Sun, 14 Aug 2016 09:46:28 GMT

Hi,

Please see below:

https://live.paloaltonetworks.com/t5/Management-Articles/Can-the-Palo-Alto-Networks-Firewall-be-Configured-as-a-DNS/ta-p/55549

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-Caching-for-the-DNS-Proxy/ta-p/53223

This should answer your questions

Thx

Re: Palo Alto as a DNS Server

BPry — Mon, 15 Aug 2016 17:15:03 GMT

You can setup the PA as a DNS proxy and then cache DNS entries as long as you have everything setup correctly. This doesn't really offer you any advantages of making custom DNS entries however since it's still only going to pull DNS from the actual DNS server. I would look at just setting up a DNS server locally if you need to make custom entries, you should be able to through it on pretty much any server that you are running without any issues at all.

Re: Palo Alto as a DNS Server

TranceforLife — Fri, 19 Aug 2016 19:52:39 GMT

Hi,

This might help you. Very easy to configure, just a simple txt file and it is free :

http://dhcp-dns-server.sourceforge.net