DNS Proxy doesn't work

[puzzel]

Hi,

I configured dns proxy like have been deescribe on palo-alto but it doesn't work at all.

I made this steps:

1 - enabled dns proxy on l3 vlan interface

2 - set two dns servers to use

3 - enabled cache

But i don't see anything in dns proxy cache.

Maybe i forgot something?

Tnx

Answer

[panos]

have you changed your dns setting on the clients and map them to l3 interface ip ?

[panos]

How to Configure DNS Proxy on a Palo Alto Networks Firewall

[puzzel]

Yes and still doesn't work.

Do i need to make special security policies for that?

I use Captive Portal too.

[jwolach]

Sounds like you didn't create any DNS Proxy rules.

[panos]

Clients will make dns lookup using the interface(ip) you enabled.I don't think you have a deny rule for that but check to be sure.

can you check output of that also :

show dns-proxy statistics all