Unable to View URL/Domain in Destination Address

[ChandrashekharD]

Hi Friends,

We have a customer who is only able to see the IP address in the destination field, as hostname resolution is not functioning correctly. However, he would like to view the URL or domain name along with the IP in the destination address.

To troubleshoot the issue, I took the following steps:

1. Enabled the "Resolve Hostname" option on the monitor traffic logs page.

2. After analyzing the traffic log reports, I found that resolving DNS hostnames requires configuring address objects on the firewall. Alternatively, this can be achieved through a DNS lookup, which I suggested to the customer.

3. However, the customer has informed us that a local DNS is already configured, and they prefer not to manually enter address objects. Therefore, the proposed solution does not align with their current requirements.

4. Please assist in resolving this issue.

Regards,

Chandrashekhar

[BPry]

@ChandrashekharD ,

Configuring an FQDN address object should not be required for this to function at all and doing so is only working because the log entry will resolve to the object name. 

Have you tried to verify that the firewall can actually resolve objects yourself? That solution is untenable enough that I would question if they actually tried your suggestion at all; I would want to know that DNS resolution is actually working before moving on. Additionally, what PAN-OS version are they actually running?

[ChandrashekharD]

Hi BPry,

Thank you for your response.

My end customer enabled the "Resolve Hostname" option on the monitor traffic logs page and tested it, but they were not satisfied with the results. I'm unsure whether DNS resolution is functioning correctly, and I suspect that reverse DNS lookup may not be working properly. The currently installed PAN-OS version is 11.0.3.