Hi, we´re switching from MS FTMG to FortiGate with Explicit Web Proxy and a "Web Proxy Forwarding Server". The MS FTMG sends all DNS-Request to the configured 'Upstream Proxy'. How can i configure this Option on a FortiGate? Opening a Website results in '504 DNS look up failed'. Using a local DNS-Server is not an Option. There is no Webfilter configured.
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
I have opened ticket for this problem. Guess what... it is normal and as per design :)
Of coarse this is absolutely wrong design. You dont need to resolve anything via DNS when using proxy. As support said, this is simply not yet implemented feature in FortiOS.
I have opened ticket for this problem. Guess what... it is normal and as per design :)
Of coarse this is absolutely wrong design. You dont need to resolve anything via DNS when using proxy. As support said, this is simply not yet implemented feature in FortiOS.
Any update to this behavior?
FortiOS 6.2? mhmh?
hm you could to two things:
a) set the FGT system DNS to your DNS Proxy. Enable DNS Databse Feature on your FGT and configure a DNS Forwarder on the FGT for the interface you need on.
b) let DHCP do it for you. Letzt the FGT be DHCP Server on the interface you need and set the DHCP Server to hand out the proxy as DNS to the Clients.
--
"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
Hi All,
has anyone found resolution to this issue? if yes then what was the fix as we are currently having the same issue.
Regards,
Fida
as said you can use the FGT as DNS Server for your clients and set the FGT to do DNS forwarding to your proxy.
DNS Forwarding on FortiOS can be configured per interface. The feater in gui is just not enabled by default. So enable "DNS Datbase" in Feature View to have it in gui.
--
"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1688 | |
1087 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.