How Does a GlobalProtect Prisma Access Client Make DNS Requests
6431
Created On 02/29/24 14:36 PM - Last Modified 09/13/24 18:29 PM
Question
How is the internal and external DNS requests handled.
Environment
- Prisma Access
- GlobalProtect Client
Answer
GlobalProtect Client with utilizing Prisma Access utilizes DNS Proxy.
All requests will be sent to the same DNS Proxy IP address assigned at the time the client receives it IP address information. The DNS Proxy will determine which DNS server the request will be sent to based on DNS setting/Domain Lists configured in the Panorama or Cloud Management interfaces.
Additional Information
DNS for Prisma Access: https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-setup/dns-for-prisma-access
DNS Proxy Overview: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-web-interface-help/network/network-dns-proxy/dns-proxy-overview