DNS Proxy

[Ifsnbpt1]

Hi,

Can someone post and example of how they set up their dns proxy?

[BobW]

I second this request.

Thanks,

Bob

[sdurga]

Here you go with the link for the doc

DNS proxy

Thanks,
Sandeep T

[LCMember1607]

We have Internal DNS servers that reach outside, to our ISP, for external DNS. I would like to setup Proxy to prevent all the DNS traffic from reaching inside. To do this I click on DNS Proxy within the Network tab and add my Private internal interface, within the Interface section, and add the ISP DNS servers in the Default DNS Settings section?

That's it?

[sdurga]

Yes, Once you enable the DNS proxy on the interface and point you internal DNS server to the same, all the DNS queries to your ISP are now made by PAN. Also please make sure that you have proper security rules, nat rules and routing for your internal interface to reach your external ISP server.

Thanks,

Sandeep T

[Ifsnbpt1]

Hello,

In the article you linked, it states you configure the clients with the IP addresses of the interfaces on which the DNS proxy is enabled.  I think I may be misreading this.  Is it literally all of our clients or just our internal DNS servers?  So our workstations point to our DNS servers, then our DNS servers point to the proxy.

Thank you,

[jadanet]

Link is no longer working...

[pulukas]

DNS proxy instructions

How to Configure DNS Proxy on a Palo Alto Networks Firewall