Split internal and external DNS lookups

[nthen]

I am wanting to split internal and external DNS lookups on my PAN appliance to cut down on some traffic hitting our internal DNS servers.  I think I can use a DNS Proxy to specify where the resolution occurs and what interface.  Does anyone have experience in splitting DNS lookups in this fashion?

[kprakash · Accepted solution]

Hi Nthen,

Did you have a chance to go through these links?

https://live.paloaltonetworks.com/docs/DOC-3637

https://live.paloaltonetworks.com/docs/DOC-3522

https://live.paloaltonetworks.com/docs/DOC-4633

BR,

Karthik

[Chatri]

Hi Nthen,

Have you considered the option of setting up DNS proxy, setting up a DNS Proxy on the Palo Alto will enable caching of entries and will reduce the number of queries made to the configured DNS servers and will end up reducing DNS requests.

[mikand]

The external lookups are towards resolvers or authoritive dnsservers?

Why not use two (well four for redundancy) physical machines?

One for internal dns and one for external stuff on each vlan.