topic Gateway is not reply on DNS requests in Cloud Firewall

Gateway is not reply on DNS requests

LM-Rafael — Sat, 27 Apr 2024 22:54:45 GMT

Hi,

I'm wondering why the firewall doesn't respond to DNS queries at all.

The provider DNS is set, but when I do an Nslookup with query google via the gateway IP (192.168.100.254), I only get the response: no answer from the server. What is the reason for this? I only found in the documentation that I have to enter the provider DNS. What else is missing here?

Customer network: 192.168.100.0/24

Please help me.

Kind regards

Rafael

Re: Gateway is not reply on DNS requests

Chris_Atkinson — Sun, 28 Apr 2024 06:46:10 GMT

The Gateway doesn't provide DNS proxy support if that's what you're asking here.

The end clients should reference a valid DNS server and this traffic needs to be permitted in your gateway policy.

Re: Gateway is not reply on DNS requests

LM-Rafael — Sun, 28 Apr 2024 07:32:43 GMT

Previously, the customer had a DNS hierarchy:

1. DNS is the Active Directory server for all computers
2. the Active Directory DNS server then had a forwarding to the old firewall
3. the firewall then made a request to the provider

This hierarchy no longer works, which is why the issue arose.

Because the Active Directory now queries the provider directly.

I am only surprised when my “nslookup” to the Check Point firewall is always answered with “No response”.

Thanks

Rafael

Re: Gateway is not reply on DNS requests

Chris_Atkinson — Sun, 28 Apr 2024 08:38:07 GMT

I assume the old firewall was not a Check Point.

Only Spark appliances provide this type of function for small office applications