?
Solved

Best practice for setting up DNS on Sonicwall

Posted on 2014-11-09
4
Medium Priority
?
632 Views
Last Modified: 2015-06-23
Hello Experts!

We have a few scenarios where I need to understand what the best practices should be for DNS at the firewall level.

Scenario 1: Windows server environments where SonicWALL doesn't handle DHCP or DNS, but rather Windows Server does. What should the DNS settings point to: a) the Windows DNS servers or b) Public DNS servers (ISP, etc.).

Scenario 2: Windows server doesn't exist or at least is not handling DHCP/DNS in the environment and SonicWALL is handling both DHCP or DNS. I'd assume DNS should be point to Public DNS servers (ISP, etc.).

Thanks!
0
Comment
Question by:Peter Wilson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 25

Accepted Solution

by:
Blue Street Tech earned 2000 total points
ID: 40431385
Hi Peter Wilson,

As a general rule, If Windows Servers are present at least one should be handling DHCP and DNS.

As a best practice for firewalls, specifically SonicWALL, irrespective of having Windows Servers in the environment or not you should have the SonicWALL's DNS point to the Public DNS servers whether that be the DNS provided by your ISP, 4-8's or OpenDNS, etc.

The primary reason for this is because the backend of SonicWALL security services uses it's internal DNS server to perform functions like licensing synchronization (mysonicwall.com), cloud security services (CFS, AppControl, Geo-IP, Botnet, etc.), CFS lookups, validations, and a number of various security service functions. In short it also reduces hops for these types of functions.

Hope that helps. Let me know if you have any other questions!
0
 
LVL 2

Author Comment

by:Peter Wilson
ID: 40431392
so no matter what I should be setting up the DNS to point to public ones? What about for site to site vpn traffic where there are two windows servers running DHCP?
0
 
LVL 25

Expert Comment

by:Blue Street Tech
ID: 40431393
Yes, if Windows is handing out DHCP is should be handing out DNS as well.
0
 
LVL 2

Author Closing Comment

by:Peter Wilson
ID: 40432895
Great. Thanks! Your detailed response and  thorough knowledge was warmly welcomed.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
David Varnum recently wrote up his impressions of PRTG, based on a presentation by my colleague Christian at Tech Field Day at VMworld in Barcelona. Thanks David, for your detailed and honest evaluation!
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Suggested Courses
Course of the Month10 days, 14 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question