Hi All
About a year ago, DNS security via the Security Intelligence section stopped working when the Secondary HA ASA becomes the active firewall (which happens frequently due to module monitoring at the Asa level and weekly deployments resulting in frequent sub second module restarts ). The client is not pushing the DNS layer protection, so I can't spend time on a lengthy Cisco Case. (i did open a case but upgrading was the next step).
I have since upgraded a couple of times and it has never fixed it. Just wondering if anyone else has come across this?
I've unloaded the Dns policy and reapplied it as another step with no change in the situation.
