Hello Pawel, If you are configuring service routes for reaching to DNS server through any other interface other than management interface yes we do it as shown in below image. I have highlighted on left for DNS, we generally select another interface on PAN to pass traffic. In your case seems like this is not working neither the management interface. Steps to ensure: 1> Do source ping: ping source <New interface IP configured on service route> host <Dns server IP> If configured right it has to send out pings and we can see outcome. 2> We can take packet captures on PAN for new interface configured for DNS traffic to pass through and instantly we can see data on the captures, if we do not see then PAN is not passing. Based on the captures we may know that if the Dns server if received dns packets from PAN did it respond back or not. 3> Also in the above image on the right you can select custom values as shown. Indicate the DNS server IP in destination field and source address as the new interface IP address. Hope these steps should narrow down the issue. Thanks
... View more