CLI ping and traceroute resolving ip

[kevin_thys]

Hi,

In the GUI the PA is resolving ip address by quering the dns server. But with CLI commands like ping and traceroute it doesn't seems to do DNS resolving. I think it should be because there is a CLI command no-resolve.

Any ideas why it isn't resolving in the CLI?

[jleung]

Hi,

What is your service route setting for DNS?

[kevin_thys]

Default and I think that default means MGMT

[jleung]

Hi,

So would you make sure that the mgmt ip can reach the DNS server? you may need to allow the mgmt ip to access the dns server if the mgmt ip need to pass through the PA box before it can access the dns server.