- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Fortigate to resolve local DNS entry for address object
Hello fellows!
In a FGT-61F I created a local DNS service for domain "local.tld" with some A records in it.
All clients using the fgt as their primary DNS server and can resolve all hosts in "local.tld" with their FQDN.
Fine.
Now I want to use this working FQDN resolution for some firewall policies, so I added some addresses.
When I try to use the same FQDN for an address object, fgt says "Unresolved FQDN: host.local.tld".
What am I doing wrong? Any suggestions?
Working on FGT-61F with FortiOS 7.2.6.
Any help welcome. Thank you in advance!
Regards, Michael.
Mic
Solved! Go to Solution.
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Mictronic,
Thanks for reaching out.
I think you are just seeing the GUI bug.
Please refer: https://docs.fortinet.com/document/fortigate/7.2.6/fortios-release-notes/236526/known-issues
Bug ID: 958311
Please run the following command:
diagnose test application dnsproxy 7
You will see the IPs being resolved.
Thank you!
-lgupta
If you feel the above steps helped to resolve the issue mark the reply as solved so that other customers can get it easily while searching on similar scenarios.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello
FGT must to point to itself for DNS resolution.
Go to Network > DNS, and add FGT IP as primary DNS server.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello AEK,
well, I ran into a GUI only bug, FQDN resolution for address objects works, even if I do not use internal DNS in Network DNS.
Regards, Mic
Mic
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Mictronic,
Thanks for reaching out.
I think you are just seeing the GUI bug.
Please refer: https://docs.fortinet.com/document/fortigate/7.2.6/fortios-release-notes/236526/known-issues
Bug ID: 958311
Please run the following command:
diagnose test application dnsproxy 7
You will see the IPs being resolved.
Thank you!
-lgupta
If you feel the above steps helped to resolve the issue mark the reply as solved so that other customers can get it easily while searching on similar scenarios.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Igupta,
yes that's it, FQDN resolution works but only the GUI says it's not.
Thanks for the hint to that bug.
Regards, Michael.
Mic
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So, If this only a GUI cosmetic bug, why do rules show no matched traffic or log these entries?
Seems more broken than just cosmetic. These logs are not getting to the SIEM, because they can't.
When will 7.2.8 firmware be released?
