topic DNS NAT (DNS Doctoring) in Spark Firewall (SMB)

DNS NAT (DNS Doctoring)

bbruelhart — Fri, 05 Jul 2024 11:07:11 GMT

I try to replace a Cisco ASA with a Check Point Quantum Spark. The Cisco ASA does DNS Doctoring (mangling DNS requests for NAT).
I know this is possible with full grown Check Point Quantum appliances as decribed in sk34295. Does anyone know if that works on Quantum Spark as well?
I don't think so but would like this to be confirmed.

Thank you.

Re: DNS NAT (DNS Doctoring)

G_W_Albrecht — Fri, 05 Jul 2024 13:21:17 GMT

Hardly - you need a SMS to configure it, and it is unclear if SMBs will get this by policy install at all.

But there is a post i find interesting:

https://community.checkpoint.com/t5/Security-Gateways/Can-Security-Gateway-act-as-DNS-Server/m-p/172138#M31264

And on 1550:

# find / -name 'dnsmasq'
/pfrm2.0/bin/dnsmasq

Re: DNS NAT (DNS Doctoring)

PhoneBoy — Mon, 08 Jul 2024 18:35:01 GMT

dnsmasq has been used on SMB appliances for a while.
It's also been "hidden" on regular gateways...and it appears to be active in R82 EA.