Skip to main content
jimmyt
New Member
October 21, 2011
Question

Split DNS for Explicit Proxy

I have a Fortigate 600B that is used as a web proxy server. For name resolution the Fortigate uses one of our corporate DNS servers. It also has a small number of zones in its local DNS database. My issue is that now for one of the zones I require the Fortigate to look at its internal database for some entries but, if there are no specific host entries in the local zone, then do a lookup on our corporate DNS server. At the moment if the host entry is not found in the zone in its local DNS then the lookup bombs. I know that a split DNS configuration can be done for user DNS lookups but I can' t get this working for the lookups required by the explicit proxy. Any ideas?

    14 replies

    laf
    New Member
    November 16, 2011
    Very nice explanation! Thanks again!
    ede_pfau
    SuperUser
    SuperUser
    November 16, 2011
    Really? I haven' t found anything in the docs about this - Handbook, Release Notes, What' s New, CLI Guide: all I can find are the same record types as they had in 4.2.
    emnoc
    New Member
    November 16, 2011
    Interesting discussion, I think alot of this can be handle with a low memory/disk vmguest, and via using some type of " view" and forwarders statement DNS topology has always been a sore topic with today' s crops of Windoze and nix administrators.
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT