ASA to block unauthorized DNS updates

[cecilm]

I am seeing requests for DNS updates being denied on my DNS servers. Can I block the requests at the ASA without interfering with legitimate traffic? I am thinking yes by allowing my ISP DNS servers then blocking all other traffic on port 53 but would like to verify.

Thank you,

[Julio Carvajal]

Hello Cecil,

It does make sense and yes you can do it like that

Regards,

Julio