Troubleshooting Tip: FortiProxy DNS troubleshooting

Description

This article describes the commands to troubleshoot possible DNS issues in FortiProxy.

Scope

FortiProxy all versions.

Solution

The commands below will show the configuration of DNS in the FortiProxy.

show sys dns

show sys dns-server

show sys dns-database

The below command will provide further details on stats and settings:

diagnose test application dnsproxy <intiger>

To show the DNS stats, type the command:

diagnose test application dnsproxy 2

To show the DNS settings, type this one:

diagnose test application dnsproxy 3

To reload the FQDN:

diagnose test application dnsproxy 4

diagnose test application dnsproxy 5

To dump DNS database:

diagnose test application dnsproxy 8

To show Hostname:

diagnose test application dnsproxy 12

To capture the DNS traffic, type the following sniffer command:

diagnose sniffer packet any "(host <dns-primary-ip> or host <dns-secondary-ip>) and port 53" 6 0 a