Troubleshooting Tip: Monitoring local out DNS traffic statistics

[Ted]

Description	This article describes how to monitor local out DNS traffic generated by FortiGate. FortiGate generates DNS queries as local out traffic to resolve domain names required for FortiGate features and services, such as FortiGuard connection, system update, FQDN resolve, certificate verification, and so on.
Scope	FortiGate.
Solution	GUI monitoring. FortiGate provides an admin user with Sent/Received (bytes), Sent Packets, Received Packets, Sent Bytes, and Received Bytes columns for local out DNS sessions at Log&Report -> Local Traffic. CLI monitoring. In CLI, FortiGate provides more detailed information and statistics of dnsproxy daemon about DNS proxy activity. DNS UDP: req=996 res=272 fwd=241 cmp=591 retrans=38 to=17 --> req, res fields indicating the number of DNS requests sent by the FortiGate and DNS response received.