Single DNS_Proxy Interface serving multiple networks

[DivisaoRedes]

Hi Sirs/Mesdames,

I have a Paloalto with DNS-Proxy activated and serving the LAN interface, let's say: 10.0.0.1 (dns_proxy)

Is it possible to point clients from networks on interfaces/networks to use the same dns_proxy configure for LAN (10.0.0.1)

Example:

client 192.168.0.10 on eth2 could use dns_proxy 10.0.0.1 previously configured for LAN on eth1? Or do I need to creat a dns_proxy 192.168.0.1 (eth2) to serve only this network.

Must I create a DNS_Proxy for each network that I want to use dns_proxy in Palo alto?

[BPry · Accepted solution]

@DivisaoRedes,

You can setup any of the interfaces you want on the same DNS Proxy entry, you don't need to create a new one for every single interface. 

[Remo · Accepted solution]

Hi @DivisaoRedes 

It is possible to use one dns proxy IP also for clients located behind other interfaces. It is even possible to create a loopback interface and configure dns proxy there. This way you could also locate the dns proxy in its own securityzone.