Quantum Spark 1595 - DNS resolution

[TheOddCECI2025]

Hello, I have a DNS resolution issue

[Issue]
In our internal network environment, Host A is trying to connect to External Website A over ports 80 and 443.
However, Host A is unable to properly resolve the domain name of Website A.

[Description]

In the Outgoing Internet Access policy on the policy page, I configured the following rule:

Source: Host A

Destination: Website A (added as a domain-based network object)

Application: Web Browsing

Under this configuration, Host A is unable to browse Website A. The error messages are along the lines of “This page can’t be displayed” or “Please make sure the URL is correct.”

However, if I change the Destination to ANY, or to the IP address of Website A, the connection works fine.

Based on this, I initially suspect that the issue is related to DNS resolution for Website A.

That said, when I run a DNS lookup for Website A using Diagnostics > Tools > Perform a DNS lookup, it resolves correctly.
After the DNS resolution, Host A is immediately able to access Website A.
But after a while, the issue reoccurs, and Host A can no longer connect to the site.

[Additional Information]

Both Host A and the firewall itself are configured to use the same internal DNS server, which is our Microsoft Active Directory server.We’ve confirmed that the DNS connectivity is working correctly, and that DNS resolution through this server is functioning as expected.

At this point, I’m not sure whether the issue is related to a network/DNS resolution problem, or a configuration issue within the policy itself. Have I forgotten anything else?

[_Val_]

So many details missing. Let's start wiht the basics: 

1. SW version on your 1595

2. How does your "domain-based network object" look like?

Also, on the SMB appliance, do you have DNS properly configured? Can you resolve the domain object by name via CLI, on the appliance itself?

[Lesley]

I suspect that the gateway itself is unable to do DNS or is unable to resolve the domain based object.

Or you created the object incorrect. Please share screenshot

[PhoneBoy]

It sounds vaguely like an issue with rad.
If you are not already on R81.10.17, upgrade to that: https://support.checkpoint.com/results/sk/sk183153?server=us
If you're still having issues, I suggest opening a TAC case.