https://community.cisco.com/t5/network-security/firepower-devices-and-dns/m-p/3933560#M939149 <P>Hello,&nbsp;</P><P>&nbsp;</P><P>I would like to ask if the FTD needs to access the internet DNS.&nbsp;</P><P>I have high availability FTD 2110 managed by FMC and I see in the events that there are several queries to DNS that are blocked.&nbsp;</P><P>DNS isn't managed by FMC? Do the FTDs have any reason to access DNS?</P><P>&nbsp;</P><P>Thanks and regards,&nbsp;</P><P>Konstantinos</P> Fri, 21 Feb 2020 17:32:47 GMT kostasthedelegate 2020-02-21T17:32:47Z https://community.cisco.com/t5/network-security/firepower-devices-and-dns/m-p/3933560#M939149 <P>Hello,&nbsp;</P><P>&nbsp;</P><P>I would like to ask if the FTD needs to access the internet DNS.&nbsp;</P><P>I have high availability FTD 2110 managed by FMC and I see in the events that there are several queries to DNS that are blocked.&nbsp;</P><P>DNS isn't managed by FMC? Do the FTDs have any reason to access DNS?</P><P>&nbsp;</P><P>Thanks and regards,&nbsp;</P><P>Konstantinos</P> Fri, 21 Feb 2020 17:32:47 GMT https://community.cisco.com/t5/network-security/firepower-devices-and-dns/m-p/3933560#M939149 kostasthedelegate 2020-02-21T17:32:47Z https://community.cisco.com/t5/network-security/firepower-devices-and-dns/m-p/3933712#M939150 <P>FTD devices may be doing some lookups with cloud-based services like AMP for file policies. That would require DNS.</P> <P>This and a few other uses are noted here:</P> <P><A href="https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/security_internet_access_and_communication_ports.html" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/security_internet_access_and_communication_ports.html</A></P> Wed, 02 Oct 2019 10:32:12 GMT https://community.cisco.com/t5/network-security/firepower-devices-and-dns/m-p/3933712#M939150 Marvin Rhoads 2019-10-02T10:32:12Z