Pix 515E OS 7.2.2 DNS rewrite

[prochereau]

Hello,

We must used the feature DNS rewrite with pix 515E os 7.2.2 but it doesn't work.

I just use this static rule :

static (inside,CAG) 172.21.250.1 170.250.249.8 netmask 255.255.255.255 dns

when i'm connected to dmz cag i make a dns request to dns server in the inside DMZ but the response is 170.250.249.8.

I don't understand because this feature is ok with 6.3.3 Os.

Have you an idea?

Thank.

[bwalchez]

Make sure that you have DNS inspection configured on the security appliance.

Try this link for more info:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml#dns-notperf