FQDN rules and DNS features

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

FQDN rules and DNS features

L0 Member

Hi all,

We started using FQDN rules few days ago. The purpose, once again, is to remove "basic IP rules" and to allow the team in charge of server to move their application without asking to change Firewall rules all the time. So, it works great but we have some limitations. Because the PAN device takes into account the TTL value, it will send DNS request every TTL value. On the PAN device, we can ask to force the refresh every 4 hours, but no less. 4 hours is quite a long time.....

To make the behaviour more dynamic and because PAN devices are "application aware" firewalls, it should be possible to inspect DNS traffic running from the clients to the DNS servers. The idea here would be to inspect responses from the internal DNS ( trusted ) and make the PAN devices update their DNS table with these informations.

I would like to get your feed back about this proposal.

Thanks you.

3 REPLIES 3

L0 Member

someone ?

L6 Presenter

This would be a feature request and should be directed to your sales team so that they may submit it on your behalf.

-Benjamin

Thanks,

I've already sent the feature request to our sales teams. Here I just want to have Palo Alto and other customer's feedback about the usefullness and security aspects of the feature.

Benjamin

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!