topic Re: Updateable object - DNS behavior in Firewall and Security Management

Updateable object - DNS behavior

kietnguyen1011 — Mon, 31 May 2021 09:01:13 GMT

Hi all,

We got the strange behavior on DNS request when implementing the updatable object, a lot of PTR DNS request to our DNS server. I know that the updateable object may contains some non FQDN object and the gateway will do reverse DNS resolution.

The object we use is "Azure Public Services". Is there any tools to view the content of the object also ?

Thus, is that the well-know behavior and is there any way to limit it ?

Thank you

Re: Updateable object - DNS behavior

kietnguyen1011 — Mon, 31 May 2021 10:15:34 GMT

Hello,

After some investigation on my side, the PTR only happened for internal network 10.X.X.X

I can see that some Data center object ( with IA blade enabled ) had the log field: "Source/Destination Machine Name"

Is it possible to turn off this kind of query ?

Re: Updateable object - DNS behavior

PhoneBoy — Mon, 31 May 2021 15:51:50 GMT

This thread explains how to see what’s in the object: https://community.checkpoint.com/t5/Management/R80-20-Updatable-Domain-Objects-and-CLI-Commands/m-p/58025