dns name-server config on ASA is needed?

[mahesh18]

Hi everyone,

I have config ASA with DNS servers in object group network.

object-group network DNS_Servers
 network-object host 10.x.x.x
 network-object host 10.x.x.x

They are our internal DNS servers and i can ping them from ASA.

also i have command dns domain-lookup inside configured.

Need to know do i need to config dns name-server  with IP of those dns servers?

Regards

MAhesh

[mvsheik123 · Accepted solution]

Hi Mahesh,

Not mandatory. It depends whether the ASA need to access resources (Botnet filter). Also, if you want to ping/tracroute using hostnames. Please see below link for detailed explanation.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/basic.html#wp1080248

hth

MS

[mahesh18]

Many thanks MS.