topic Re: Single DNS_Proxy Interface serving multiple networks in General Topics

Single DNS_Proxy Interface serving multiple networks

DivisaoRedes — Wed, 18 Aug 2021 19:04:42 GMT

Hi Sirs/Mesdames,

I have a Paloalto with DNS-Proxy activated and serving the LAN interface, let's say: 10.0.0.1 (dns_proxy)

Is it possible to point clients from networks on interfaces/networks to use the same dns_proxy configure for LAN (10.0.0.1)

Example:

client 192.168.0.10 on eth2 could use dns_proxy 10.0.0.1 previously configured for LAN on eth1? Or do I need to creat a dns_proxy 192.168.0.1 (eth2) to serve only this network.

Must I create a DNS_Proxy for each network that I want to use dns_proxy in Palo alto?

Re: Single DNS_Proxy Interface serving multiple networks

BPry — Wed, 18 Aug 2021 20:30:16 GMT

@DivisaoRedes,

You can setup any of the interfaces you want on the same DNS Proxy entry, you don't need to create a new one for every single interface.

Re: Single DNS_Proxy Interface serving multiple networks

Remo — Wed, 18 Aug 2021 20:31:09 GMT

Hi @DivisaoRedes

It is possible to use one dns proxy IP also for clients located behind other interfaces. It is even possible to create a loopback interface and configure dns proxy there. This way you could also locate the dns proxy in its own securityzone.