Skip to main content
peterk2020
peterk2020
Visitor III
May 19, 2026
Question

Using Fortigate as a DNS server for users.

  • May 19, 2026
  • 2 replies
  • 38 views

Here is what I want to achieve with using Fortigate as a DNS server for all remote locations.

For internal users, using Fortigate interface IP as a DNS server.  Fortigate will forward any public domain name queries to system DNS servers while any internal domain names to HQ DNS servers. 

The issue I’m having is the internal DNS queries are not working.  Outside DNS resolution works fine.

Any suggestions?  Let me know if you need more details on my configs.  Thanks.

 

    2 replies

    sjoshi
    Staff
    sjoshi
    Staff
    May 20, 2026

    you must have enabled recursive in that case all dns request will be sent to external dns server and it wil not resolve the internal domain

    you can setup dns database since you are using fgt as a dns server

    https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/960561/fortigate-dns-server

    Thanks, Salon
    sw2090
    SuperUser
    sw2090
    SuperUser
    May 21, 2026

    yes will have to set up  a DNS Zone (DNS Database) for internal resolving to work and set the DNS on Interface to recursive.

    Or configure conditional forwarding on the FGT if you have an existing DNS that can resolve internal stuff.

    Terms & ConditionsAccessibility statement