- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
I have a problem with DNS Proxy in Prisma.
it’s the same IP address as monitoring target (for on-prem to prisms IP-Sec tunnels).
Which tunnel is correct for DNS-Proxy traffic - Remote Network or Service Connection (or both)?
It does not also work from site, where I have only RN configured. I can ping the DNS-Proxy IP, but not dns resolution.
I’ve configured DNS-Proxy section in Remote Networks configuration:
- no rule, custom DNS
- one rule, custom DNS
- one rule, cloud default DNS
I did not configure any security policy from Prisma DNS-Proxy to internet - do I need it?
I have security policy from (prisma trust, my test PC) to (prisma trust DNS Proxy address) on the RN device group. I can see hits on this policy, but bytes received=0.
I’ve configured decryption exclusion from Prisma Infra subnet (trust) to internet (untrust), but it did not help.
How can I verify if my DNS-Proxy in Prisma is enabled?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!