topic FirePower ASA DNS not resolving in Network Security

FirePower ASA DNS not resolving

raza555 — Wed, 15 Mar 2023 14:31:48 GMT

Hi,

We have DNS issue on the firewall, although DNs has been configured as below but we firewall 'debug dns' still showing below error message.

FirePower/pri/act# ping www.google.com
^

config:
=======
dns domain-lookup management
DNS server-group DefaultDNS
name-server 10.10.10.10
name-server 10.10.20.10
domain-name abc.co.uk

route management 10.10.10.10 255.255.255.255 10.10.11.1 1
route management 10.10.20.10 255.255.255.255 10.10.11.1 1

'debug dns' output
==================

DNS: Resolve request for 'www.google.com' group DefaultDNS
DNS: DNS is not Enabled on interface vPifNum=2 for nameserver ip=10.10.10.10
DNS: DNS is not Enabled on interface vPifNum=2 for nameserver ip=10.10.20.10

Thanks

Re: FirePower ASA DNS not resolving

balaji.bandi — Wed, 15 Mar 2023 17:49:24 GMT

either you need to add :

dns domain-lookup inside or dns domain-lookup outside depends in requirement ?

dns domain-lookup management - is this pingable to DNS Server using management ?

try below syntax :

DNS server-group DefaultDNS
name-server 10.10.10.10 management
name-server 10.10.20.10 management

Re: FirePower ASA DNS not resolving

Mark Elsen — Wed, 15 Mar 2023 17:50:00 GMT

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb57213
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwc21479

Re: FirePower ASA DNS not resolving

raza555 — Wed, 15 Mar 2023 18:08:50 GMT

Thanks alot Balaji.

I have used the syntax with additional word 'management' and all start working.

Thankyou 🙂