DNS Proxy for Specific Vsys to resolve FQDN Object

Reply
Highlighted
L1 Bithead

DNS Proxy for Specific Vsys to resolve FQDN Object

Can I create a DNS-proxy for a specific proxy to resolve FQDN created in object>address.

I create a DNS-proxy with the DNS profile but it didn't work, the firewall use always the DNS configured in Device>Service>Globale

clipboard_image_2.png

clipboard_image_3.png

 

 

 

Highlighted
Cyber Elite

Re: DNS Proxy for Specific Vsys to resolve FQDN Object

Hi @ayoubAitkhouya 

 

FQDN objects will always be resolved by the cpnfigured global DNS servers of the firewall. If you need to use a DNS proxy to resolve these you need to configure a DNS proxy object as the firewalls DNS server. But this is not possible for vsys specific objects as then all objects of all vsys are resolved by this object.

Highlighted
Cyber Elite

Re: DNS Proxy for Specific Vsys to resolve FQDN Object

Hello there.

 

The mgmt interface is the one that normally resolves the FQDN address object,  using the DNS profile, in Device>Service>Global

 

You may want to consider having the Mgmt interface point to the DNS proxy object.

 

Help the community: Like helpful comments and mark solutions
Highlighted
L1 Bithead

Re: DNS Proxy for Specific Vsys to resolve FQDN Object

Thank you SteveCantwell,

 

That's the problem I want that the firewall resolve FQDN by the DNS proxy configured for Vsys.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!