Solved

Best practice for setting up DNS on Sonicwall

Posted on 2014-11-09
4
522 Views
Last Modified: 2015-06-23
Hello Experts!

We have a few scenarios where I need to understand what the best practices should be for DNS at the firewall level.

Scenario 1: Windows server environments where SonicWALL doesn't handle DHCP or DNS, but rather Windows Server does. What should the DNS settings point to: a) the Windows DNS servers or b) Public DNS servers (ISP, etc.).

Scenario 2: Windows server doesn't exist or at least is not handling DHCP/DNS in the environment and SonicWALL is handling both DHCP or DNS. I'd assume DNS should be point to Public DNS servers (ISP, etc.).

Thanks!
0
Comment
Question by:Peter Wilson
  • 2
  • 2
4 Comments
 
LVL 24

Accepted Solution

by:
diverseit earned 500 total points
ID: 40431385
Hi Peter Wilson,

As a general rule, If Windows Servers are present at least one should be handling DHCP and DNS.

As a best practice for firewalls, specifically SonicWALL, irrespective of having Windows Servers in the environment or not you should have the SonicWALL's DNS point to the Public DNS servers whether that be the DNS provided by your ISP, 4-8's or OpenDNS, etc.

The primary reason for this is because the backend of SonicWALL security services uses it's internal DNS server to perform functions like licensing synchronization (mysonicwall.com), cloud security services (CFS, AppControl, Geo-IP, Botnet, etc.), CFS lookups, validations, and a number of various security service functions. In short it also reduces hops for these types of functions.

Hope that helps. Let me know if you have any other questions!
0
 
LVL 2

Author Comment

by:Peter Wilson
ID: 40431392
so no matter what I should be setting up the DNS to point to public ones? What about for site to site vpn traffic where there are two windows servers running DHCP?
0
 
LVL 24

Expert Comment

by:diverseit
ID: 40431393
Yes, if Windows is handing out DHCP is should be handing out DNS as well.
0
 
LVL 2

Author Closing Comment

by:Peter Wilson
ID: 40432895
Great. Thanks! Your detailed response and  thorough knowledge was warmly welcomed.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Occasionally you run into the website or two that will not resolve properly using your own DNS servers.  Some people simply set up global forwarders for their DNS server.  I don’t recommend doing this because it can cause problems resolving addresse…
Transparency shows that a company is the kind of business that it wants people to think it is.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now