Suspicious DNS Requests Made by DNS servers and Checkpoint Gateway

[kaka]

Hello Team,

As a request from IS team, we notice that checkpoint gateway frequently lookups to internal dns server its make by dns lookup behaviors. but with this behaviors the malicious domain that created on the domain object was also made and alerted to the abnormal activity on our DNS server.

Can we separate between public and private domain lookup on checkpoint? it's meant that if private domain can lookup to internal dns but if public domain query external DNs.

Toura