Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 27 subscribers
  • Views 838 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG in Azure - unable to resolve DNS without FQDN

SaschaMeier

Hi there,

we have a Sophos XG active in Azure. Basically everything works as configured, except for DNS resolution if the object has NO FQDN.

The goal is to ensure name resolution for objects without FQDN from a VM in Azure. With the Sophos SG UTM you could "simply" store the IP address for a DNS name including reverse. With the XG I am biting my teeth out.

Example:
DNS name: vmhost.contoso.com
Result: Fully resolvable locally and in the network

DNS name: vmhost
Result: Resolvable locally on the firewall, not in the network

The following is configured:
- Firewall Firmware: SFOS 18.0.0 GA-Build354
- DNS request route for domain resolution, but also for Single DNS Name (2. does not work)
- DNS is allowed for the affected zones
- DoS and IPS is currently disabled
- Firewall rule allows traffic

Try some:
- Host registered
- DNS host record added (seems to work only with websites?)

Anyone have an idea how I can solve this?

Thanks a lot!

 

Regards, 
Sascha



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to LuCar Toni

    Hey,

    Thanks for the note with TCPDUMP.

    I think I was able to solve the problem. The request was extended with the domain suffix, which you didn't see anywhere except in TCPDUMP. It was then "vmhost.yourdomain.com"

    After I added the entry to our DNS server it did not work yet. I first had to delete the query route to the customer domain (where this server exists). After deleting it, the resolution of the DNS name "vmhost.yourdomain.com" worked.
    After that I could add the DNS query route again, so now both work.

    But it is not logical...