Skip to main content
SyslaGrimm
New Member
August 27, 2024
Solved

ZTNA FQDN Off-fabric

  • August 27, 2024
  • 1 reply
  • 1839 views

Hello fellas, I've hit a snag trying to configure ZTNA to work with FQDN and I can't really seem to understand why.

Firstly I'll state that the configuration works when using IP addresses but when changing the IP address to a FQDN it just doesn't work.

the FQDN are configured on both the 'ZTNA Destinations' on the EMS server and the ZTNA Server on the FW there's a FQDN entry that resolves to the internal IP, I've also tried specifying the Virtual host and directing to the IP which also didn't work, I feel like I'm missing something along the way.

Thanks in advance.

    Best answer by AEK

    Hello

    • Which EMS, FCT and FOS versions?
    • Can your EMS & FOS do DNS resolution for the internal addresses?

    1 reply

    AEK
    SuperUser
    AEKAnswer
    SuperUser
    August 27, 2024

    Hello

    • Which EMS, FCT and FOS versions?
    • Can your EMS & FOS do DNS resolution for the internal addresses?
    SyslaGrimm
    New Member
    August 27, 2024

    Thank you for that, I was missing something, although the FW did resolve when creating a FQDN-entry on the targeted interface it did not resolve on the firewall level, creating a DNS Database and adding entries and directing the EMS server to the same DNS database helped resolve the issue.