FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article provides information on how to verify the root name servers and authoritative name server details that a FortiGate device learns while performing DNS lookups as a DNS resolver.
Scope
FortiGate V7.6.
Solution
To get the details of the root name servers that your FortiGate is aware of, execute the following command in the FortiGate CLI:
diagnose test application dnsproxy 19
Example Output:
The command will display a list of the 13 root name servers, their IP addresses, and authoritative name servers learned while performing the recursive DNS lookup for the client. The output will look similar to this:
