How to setup PIX to use DNS?

[jksnook]

I want to setup my PIX to resolve DNS. Is there a way to do this?

Thanks,

Jason

[shannong]

No. Otherwise security policies configured on the firewall that relied on name resolution will fall prey to a simple DNS spoof, hijack, or server compromise and would render all security configured on the firewall useless.

[jksnook]

Thank you for the reply. Then I assume there is no way to block URL's with out having to block by IP only?

[shannong]

No. The Pix cannot filter at the URL level by itself. You can have it forward the requests to Websense or N2H2 for such functionality using the [url filter] feature.