FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
krajaa
Staff
Staff
Description
This article describes how to configure DNS Translation in DNS Profile.

Solution
DNS translation has moved to the DNS profile configuration, allowing different translations to be applied on a per-policy basis. Prior to 6.2, this was a single table outside of the profile.
DNS filter dns-translation enforces what 'a record' (IP address) in a DNS reply will be translated into another IP address, which allows to control the DNS resolve result.
 
To configure a DNS filter from the GUI:

1) Go to Security Profiles -> DNS Filter.
2) Enable DNS Translation, configure as follows, and select 'Apply':
3) Apply the DNS filter profile to the firewall policy.





To configure a DNS filter from  the CLI:

1) Enable dns-translation.
# config dnsfilter profile
    edit "<dns-filter-profile>"
......
# config dns-translation
    edit 1
        set src 93.184.216.34
        set dst 10.1.100.99
        set netmask 255.255.255.255
    next
end
end

Contributors