topic Re: DNS Proxy feature in General Topics

DNS Proxy feature

djohnson229 — Wed, 29 Apr 2020 23:36:07 GMT

Hey guys, I've read about DNS proxy and how it works. My question is, what are the benefits of using DNS proxy on the firewall?

This obviously gives the Palo insight into the DNS responses, but if the DNS traffic traverses the firewall it can snoop in on the DNS anyway. I don't see anything specific to DNS under logs to even show the DNS interactions that are taking place?

This is such a basic question, hopefully someone can help 🙂

Re: DNS Proxy feature

SutareMayur — Thu, 30 Apr 2020 10:43:47 GMT

@djohnson229,

If you've requirement wherein you want public DNS to be configured for one specific subnet to restrict traffic coming towards internal DNS. At the same time, if you want to allow one internal URL through same network (which is resolvable on internal DNS only) so it will be difficult to address this requirement as you have public DNS configured. So DNS proxy helps in this situation.

You can have public DNS configured for required subnet. And for 2nd requirement of internal URL, you can either configured DNS proxy Rule or Static entry for required internal URL. With this only one desired Internal URL will start resolving required internal IP based on DNS Proxy Rule/Static Entry.

Mayur

Re: DNS Proxy feature

djohnson229 — Thu, 30 Apr 2020 22:49:26 GMT

Yeah, that makes sense. Thanks for the reply.

Re: DNS Proxy feature

SutareMayur — Fri, 01 May 2020 07:16:56 GMT

@djohnson229,

Could you mark this question as solved please?

Mayur