Technical Tip: DNS policy for internal users query

[gsharma]

Description	This Article describes how to configure DNS policy for internal users.
Scope	FortiADC-VM, FortiADC.
Solution	If there is a requirement to set up the DNS policy for internal users, their request will only be listened by the interface which is internal. DNS policy has to be configured in such a way that in the source, it can include the internal LAN segment address group, and in a destination, it is possible to specify the same LAN segment or the Internal interface IP address as well. Follow the below steps: Go to Global Load Balance -> Zone tools -> Address group. After configuring the address group go to Zone and select 'Create new'.  Call this Zone list in the DNS policy: Note: Enable the Recursion, the DNS server will then attempt all checks to answer the query. If Disabled DNS server will return a referral response. Related document:  Configuring a Global DNS policy