FirePower ASA DNS not resolving

[raza555]

Hi,

We have DNS issue on the firewall, although DNs has been configured as below but we firewall 'debug dns' still showing below error message.

FirePower/pri/act# ping www.google.com
                                     ^

config:
=======
dns domain-lookup management
DNS server-group DefaultDNS
name-server 10.10.10.10
name-server 10.10.20.10
domain-name abc.co.uk

route management 10.10.10.10 255.255.255.255 10.10.11.1 1
route management 10.10.20.10 255.255.255.255 10.10.11.1 1

'debug dns' output
==================

DNS: Resolve request for 'www.google.com' group DefaultDNS
DNS: DNS is not Enabled on interface vPifNum=2 for nameserver ip=10.10.10.10
DNS: DNS is not Enabled on interface vPifNum=2 for nameserver ip=10.10.20.10

Thanks

[balaji.bandi · Accepted solution]

either you need to add :

dns domain-lookup inside  or dns domain-lookup outside depends in requirement ?

dns domain-lookup management  - is this pingable to DNS Server using management ?

try below syntax :

DNS server-group DefaultDNS
name-server 10.10.10.10 management
name-server 10.10.20.10 management

[raza555]

Thanks alot Balaji.

I have used the syntax with additional word 'management' and all start working.

Thankyou

[marce1000]

  - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb57213
            https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwc21479

 M.