PIX 515E DNS Client Problem

[jorgvallejo]

How to configure PIX as DNS Client?

[thisisshanky]

Unless I am missing something, I think you can only set up a local database to resolve names using the "names" command even though the purpose of "names" command is to easily remember ip addresses and other numbers...

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727ab.html#wp1026003

[Patrick Iseli]

Yeah, thisisshanky is absolutly right.

the PIX will not resolve DNS names as a client.

The feature "names" is more to visualise the access-list IP addresses to names, because they are easyer to read.

sincerely

Patrick

[jorgvallejo]

Why CISCO PIX can not resolve names?

Thanks for your help.

[Patrick Iseli]

1.) Imagine 100'000 connections and the PIX would resolve all or a part of them. This would use more CPU time.

2.) If a Firewall resolves IP's then he would not be a hidden device any more, as he generates traffic.

Of course it would be nice in access-list to support dynamic IPs, but this is for now not supported.