DNS configuration query

[StevePearson]

I'm trying to confirm exactly how the DNS resolution is working on the Spark 1555 boxes as I can't find any specific details on the admin guide.

In the WebGUI you set the DNS servers, which I'm assuming need to be able to resolve both internal and external addresses, so logically you set these to the local DNS server on the LAN. However I have a couple of sites where there the "local" DNS server is on a remote network accessible via a site to site VPN link. This works fine for the users, but causes issues on the gateway sometimes due to response speeds.

There are also options here for IPv4 DNS Proxy, one to enable the Relay of DNS requests from the internal network clients to the DNS servers defined on this page, and a second, that is only available if the DNS Proxy is enabled, which is Resolve "Network Objects" (which is a link) - Use network objects as a host list to translate names to their IP addresses. When you click the link it takes you to the Network Objects page, however, the Spark is centrally managed so the objects listed in this page are not relevant to the configuration.

My hypothesis is that if you enable these options then it uses the central management object list instead. The basis for this is that if I set the DNS servers to external (1.1.1.1 / 9.9.9.9) and enable these options, it appears to work smoothly. It would be good to confirm that this hypothesis is correct and this is the best way to handle the DNS on centrally managed Sparks.

[PhoneBoy]

We've had dnsmasq on both SMB and regular gateways for quite some time, which is what is providing this functionality "under the hood."
Interestingly enough, we didn't expose dnsmasq on regular gateways as of R82 and even have documentation about this feature now (we didn't previously): https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_Gaia_AdminGuide/Content/Topics-GAG... 

Which suggests you're probably correct in your assumptions.