Prisma’s DNS Proxy

[VTQNetwork]

Hi Guys,

I have a problem with DNS Proxy in Prisma.

it’s the same IP address as monitoring target (for on-prem to prisms IP-Sec tunnels).

Which tunnel is correct for DNS-Proxy traffic - Remote Network or Service Connection (or both)?

It does not also work from site, where I have only RN configured. I can ping the DNS-Proxy IP, but not dns resolution.

I’ve configured DNS-Proxy section in Remote Networks configuration:

- no rule, custom DNS

- one rule, custom DNS

- one rule, cloud default DNS

I did not configure any security policy from Prisma DNS-Proxy to internet - do I need it?

I have security policy from (prisma trust, my test PC) to (prisma trust DNS Proxy address) on the RN device group. I can see hits on this policy, but bytes received=0.

I’ve configured decryption exclusion from Prisma Infra subnet (trust) to internet (untrust), but it did not help.

How can I verify if my DNS-Proxy in Prisma is enabled?

Kind Regards,

Kacper