FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Description This article describes how to configure DNS Translation in DNS Profile.
Solution DNS translation has moved to the DNS profile configuration, allowing different translations to be applied on a per-policy basis. Prior to 6.2, this was a single table outside of the profile. DNS filter dns-translation enforces what 'a record' (IP address) in a DNS reply will be translated into another IP address, which allows to control the DNS resolve result.
To configure a DNS filter from the GUI:
1) Go to Security Profiles -> DNS Filter. 2) Enable DNS Translation, configure as follows, and select 'Apply': 3) Apply the DNS filter profile to the firewall policy.
To configure a DNS filter from the CLI:
1) Enable dns-translation.
# config dnsfilter profile edit "<dns-filter-profile>" ...... # config dns-translation edit 1 set src 220.127.116.11 set dst 10.1.100.99 set netmask 255.255.255.255 next end end