XG Firewall blocking Domain Controller DNS Lookup

Hi,

Do you have a firewall rule allowing the dns access to the internet?
ian

I do.

Hi,

I suggest you are a rule at the top lan, DNS server, wan any, allow all. Force a DNS ups the then review the log viewer file refining the view to the IP address of your DNS controller to see what other ports it is using.

Ia

Hi,

I suggest you are a rule at the top lan, DNS server, wan any, allow all. Force a DNS ups the then review the log viewer file refining the view to the IP address of your DNS controller to see what other ports it is using.

Ia

Thanks for your help.

It shows only Port 53 traffic, and all that outbound traffic being allowed.

But nothing coming back in.

Hi,

sounds like you WAN connection has a routing issue, or maybe your ISP does not allow DNS searches? Try tract form XG to a DNS server you are using  as an update site.

Ian

Maybe, but I don't have this issue when I switch back to my old ASA.

Thank you, sounds ike your ISP has locked your ASA MAC address to your link.

Ian

I hadn't thought of that.

I'll contact my guy at the ISP.

Thank You for your time and help Ian.

Hello,

did you try to test DNS from the diagnosis tools page off the XG system?

I did.

Resolving off of my Domain Controllers doesn't work, but directly resolving from 9.9.9.9 does.