Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 6 replies
  • Answers 2 answers
  • Subscribers 29 subscribers
  • Views 28831 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS Best Practices for XG

Gerry Morley

Hi there, I'm a newbie to Sophos and had a quick read through the fourms to find out DNS Best Practices for XG Firewall. I found one for UTM but I presume the same advice applies to XG (request routing and all that).

One follow on question I had was - in the aim of avoiding users locally changing their local DNS IP settings, do you recommend as DNS best practice to setup a rule on the XG firewall to allow all tcp/udp on port 53 in/out to our external name servers and then have a rule below that says Block all tcp/udp in/out to all ip addresses on port 53?

Or is there a way for XG to simply forward' people's DNS requests (to your preferred external DNS providers) without them knowing, instead of having the possibility of someone manually configuring DNS and having it just not work.

Thanks

Gerry



This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to lferrara

    Thanks for the reply back. I will give this a go. I have an internal domain controller that is doing DNS but I will configure the XG as a forwarder and then setup request routing and see if that will work for what I need. I appreciate the reply and will revert back once I have tested it.

Children
No Data