Just running pass if anyone else has come across this one
DNS resolves OK manually on CLI but the problem is that both SK and SR engineer wants kernel debug that potentially may overload the FW. Considering that this is business critical firewall potentially causing $100k loss every minute it is dead and it's remote, I'm very reluctant to run debugs. Asked support engineer to come up with something else but hit the stone wall (that's a topic i really want to start - when will CP will come up with better debugging )
Doing graceful cluster reboot (standby reboot > failover > new standby reboot) seems to have "fixed" it for now.
Anyone with better ideas regarding domain object "checks" / tricks in R80.10 before diving into kernel debug?
This is plain firewall cluster (5900) with only firewall and IA blades, nothing fancy.