FQDN resolution and dns cache

[PaoloMitre]

Hi everybody, I' ve had a problem with FQDN resolution in a FG 1000A. A policy didn' t work fine as the source address, specified by a FQDN, wasn' t resolved. I executed the diagnose command " diag test application dnsproxy 6" , that dumps the DNS proxy cache. I couldn' t see in the list the FQDN and its resolved IP. Then I executed the command " diag test application dnsproxy 4" that deletes and re-creates all FQDN addresses. After that, executing again the command " diag test application dnsproxy 6" , I could see the FQDN address and the resolved IP. Could anyone explain me what happened? Could it be a cache problem? Does anyone know as the fortigate dns cache works? Thanks! Paolo Boaretto

[Nihas]

Hi  Guys,

I have a few fqdn based policies in place.

I have executed the below command.

dia firewall fqdn flush , and all entries are gone now.

How can I initiate the sync again?

Please help