Configure DNS

Configure DNS on each Firewall Threat Defense device to enable remote access VPN policies. Without DNS, the devices can resolve only IP addresses. They cannot resolve AAA server names, URLs, and CA servers with FQDN or hostnames.

Procedure

Step 1

Choose Devices > Platform Settings.

Step 2

Edit a Firewall Threat Defense policy or click New Policy to create a new platform settings policy.

Step 3

From the left pane, choose DNS to configure the DNS servers and domain-lookup interfaces.

For more information, see Configure DNS server settings and DNS server groups.

Step 4

Configure split-tunnel in the group policy to allow DNS traffic through remote access VPN tunnel if the DNS server is reachable through the VPN network.