https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166989#M6393 <P>Is this a VPN or LAN connected PC with Harmony Endpoint installed (EP version?) and w<SPAN>hich part of the flow are you checking with tcpdump?</SPAN></P> Sat, 07 Jan 2023 11:33:58 GMT Chris_Atkinson 2023-01-07T11:33:58Z https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166983#M6390 <P>Hi, we are having 2 local and one ISP DNS server. While we are able to resolve global addresses in one network using Local DNS, the same local DNS server is not resolving global addresses in another network. Also, when we change the local dns with isp dns, the network is able to resolve global addresses. We are not observing any drop for the network related to DNS. Kindly suggest.</P> Sat, 07 Jan 2023 07:53:10 GMT https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166983#M6390 jadhavvishal219 2023-01-07T07:53:10Z https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166984#M6391 <P>What's the Version / JHF and blades used?</P> <P>What is the DNS server used, Windows or other?</P> <P>What do you see in packet capture (cppcap) or similar?</P> Sat, 07 Jan 2023 11:39:49 GMT https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166984#M6391 Chris_Atkinson 2023-01-07T11:39:49Z https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166986#M6392 <P>R80.40 HF- 158</P><P>Windows DNS Server</P><P>No drops in tcpdump/zdebug</P><P>&nbsp;</P> Sat, 07 Jan 2023 09:42:00 GMT https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166986#M6392 jadhavvishal219 2023-01-07T09:42:00Z https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166989#M6393 <P>Is this a VPN or LAN connected PC with Harmony Endpoint installed (EP version?) and w<SPAN>hich part of the flow are you checking with tcpdump?</SPAN></P> Sat, 07 Jan 2023 11:33:58 GMT https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166989#M6393 Chris_Atkinson 2023-01-07T11:33:58Z https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166990#M6394 <P>PC is LAN Connected.&nbsp; With tcpdump, i have checked all traffic related to source PC of the network as the browsing of public page also load slow maybe due to local dns resolver.</P> Sat, 07 Jan 2023 11:12:35 GMT https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166990#M6394 jadhavvishal219 2023-01-07T11:12:35Z https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166991#M6395 <P>Also, for specific Local DNS tcpdump logs, i am only getting one way logs i.e. from PC to Local DNS only.</P> Sat, 07 Jan 2023 11:17:08 GMT https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166991#M6395 jadhavvishal219 2023-01-07T11:17:08Z https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166992#M6396 <P>JHF T161 fixes some rare DNS traffic drops.</P> <P>Otherwise suggest opening an SR and continuing the investigation via a remote session.</P> Sat, 07 Jan 2023 12:00:17 GMT https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166992#M6396 Chris_Atkinson 2023-01-07T12:00:17Z https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166993#M6397 <P>Okay. Thank you Sir.</P> Sat, 07 Jan 2023 12:34:34 GMT https://community.checkpoint.com/t5/Endpoint/Local-DNS-server-not-able-to-resolve-global-addresses/m-p/166993#M6397 jadhavvishal219 2023-01-07T12:34:34Z