Solved

Best practice for setting up DNS on Sonicwall

Posted on 2014-11-09
4
552 Views
Last Modified: 2015-06-23
Hello Experts!

We have a few scenarios where I need to understand what the best practices should be for DNS at the firewall level.

Scenario 1: Windows server environments where SonicWALL doesn't handle DHCP or DNS, but rather Windows Server does. What should the DNS settings point to: a) the Windows DNS servers or b) Public DNS servers (ISP, etc.).

Scenario 2: Windows server doesn't exist or at least is not handling DHCP/DNS in the environment and SonicWALL is handling both DHCP or DNS. I'd assume DNS should be point to Public DNS servers (ISP, etc.).

Thanks!
0
Comment
Question by:Peter Wilson
  • 2
  • 2
4 Comments
 
LVL 25

Accepted Solution

by:
Diverse IT earned 500 total points
ID: 40431385
Hi Peter Wilson,

As a general rule, If Windows Servers are present at least one should be handling DHCP and DNS.

As a best practice for firewalls, specifically SonicWALL, irrespective of having Windows Servers in the environment or not you should have the SonicWALL's DNS point to the Public DNS servers whether that be the DNS provided by your ISP, 4-8's or OpenDNS, etc.

The primary reason for this is because the backend of SonicWALL security services uses it's internal DNS server to perform functions like licensing synchronization (mysonicwall.com), cloud security services (CFS, AppControl, Geo-IP, Botnet, etc.), CFS lookups, validations, and a number of various security service functions. In short it also reduces hops for these types of functions.

Hope that helps. Let me know if you have any other questions!
0
 
LVL 2

Author Comment

by:Peter Wilson
ID: 40431392
so no matter what I should be setting up the DNS to point to public ones? What about for site to site vpn traffic where there are two windows servers running DHCP?
0
 
LVL 25

Expert Comment

by:Diverse IT
ID: 40431393
Yes, if Windows is handing out DHCP is should be handing out DNS as well.
0
 
LVL 2

Author Closing Comment

by:Peter Wilson
ID: 40432895
Great. Thanks! Your detailed response and  thorough knowledge was warmly welcomed.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
Transparency shows that a company is the kind of business that it wants people to think it is.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question