topic dns domain-lookup <interface name> in Network Security

dns domain-lookup

AnjaliRawat0713 — Thu, 07 Nov 2019 10:50:35 GMT

Can I ask about the command 'dns domain-lookup <interface name>'
it looks like a global command...this won't affect our own DNS internal systems for anything else will it...it will only come
into use if using the firewall for DNS lookup for the three FQDN's provided in the configuration.
I just want to make sure it wont affect DNS for any users other than the three FQDN's configured on the firewall.

Re: dns domain-lookup

bhargavdesai — Thu, 07 Nov 2019 12:16:20 GMT

The command is used for the Cisco ASA local DNS lookup. Like if you ping from ASA's console to any domain, it uses the internally configured DNS to resolve the ip address. For more reference visit
https://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/A-H/cmdref1/d3.html#pgfId-2044521

HTH
### RATE ALL HELPFUL RESPONSES ###

Re: dns domain-lookup

AnjaliRawat0713 — Thu, 07 Nov 2019 12:37:11 GMT

Re: dns domain-lookup

Jaderson Pessoa — Thu, 07 Nov 2019 12:38:36 GMT

it is used internally, not for ther users on your environment.

Re: dns domain-lookup

AnjaliRawat0713 — Thu, 07 Nov 2019 12:47:49 GMT

Jaderson Pessoa Thank you for the response.
The DNS server IP to be configured in the ASA is same as configured in the client machine which is a.b.c.d .

Re: dns domain-lookup

Jaderson Pessoa — Thu, 07 Nov 2019 12:58:16 GMT

Well, in this case, if you change it and your ASA cannot translate the ip address your final users cannot neither.

Regards,

Re: dns domain-lookup

AnjaliRawat0713 — Thu, 07 Nov 2019 14:28:14 GMT

Jaderson Pessoa ..okay thank you