topic Re: DNS Proxy for Specific Vsys to resolve FQDN Object in General Topics

DNS Proxy for Specific Vsys to resolve FQDN Object

ayoubAitkhouya — Mon, 04 Nov 2019 15:38:19 GMT

Can I create a DNS-proxy for a specific proxy to resolve FQDN created in object>address.

I create a DNS-proxy with the DNS profile but it didn't work, the firewall use always the DNS configured in Device>Service>Globale

Re: DNS Proxy for Specific Vsys to resolve FQDN Object

Remo — Mon, 04 Nov 2019 15:46:54 GMT

Hi @ayoubAitkhouya

FQDN objects will always be resolved by the cpnfigured global DNS servers of the firewall. If you need to use a DNS proxy to resolve these you need to configure a DNS proxy object as the firewalls DNS server. But this is not possible for vsys specific objects as then all objects of all vsys are resolved by this object.

Re: DNS Proxy for Specific Vsys to resolve FQDN Object

S.Cantwell — Mon, 04 Nov 2019 15:49:14 GMT

Hello there.

The mgmt interface is the one that normally resolves the FQDN address object, using the DNS profile, in Device>Service>Global

You may want to consider having the Mgmt interface point to the DNS proxy object.

Re: DNS Proxy for Specific Vsys to resolve FQDN Object

ayoubAitkhouya — Mon, 04 Nov 2019 16:56:50 GMT

Thank you SteveCantwell,

That's the problem I want that the firewall resolve FQDN by the DNS proxy configured for Vsys.