DNS Proxy feature

[djohnson229]

Hey guys, I've read about DNS proxy and how it works. My question is, what are the benefits of using DNS proxy on the firewall?

This obviously gives the Palo insight into the DNS responses, but if the DNS traffic traverses the firewall it can snoop in on the DNS anyway. I don't see anything specific to DNS under logs to even show the DNS interactions that are taking place?

This is such a basic question, hopefully someone can help 🙂

DJ

[SutareMayur · Accepted solution]

@djohnson229,

If you've requirement wherein you want public DNS to be configured for one specific subnet to restrict traffic coming towards internal DNS. At the same time, if you want to allow one internal URL through same network (which is resolvable on internal DNS only) so it will be difficult to address this requirement as you have public DNS configured.  So DNS proxy helps in this situation.

You can have public DNS configured for required subnet. And for 2nd requirement of internal URL,  you can either configured DNS proxy Rule or Static entry for required internal URL. With this only one desired Internal URL will start resolving required internal IP based on DNS Proxy Rule/Static Entry.

Mayur

[djohnson229]

Yeah, that makes sense. Thanks for the reply.

[SutareMayur]

@djohnson229,

Could you mark this question as solved please?

Mayur