Common Practices

Fireware Pro

Configurations and examples

Firebox SSL VPN

Firebox Core SSL VPN

Firebox X Core/Edge

Setup -

Branch Office VPN (IPSec) - Firebox/Soho

Proxy Configuration

Webblocker Configuration

Remote User configuration using MUVPN & PPTP

Spamscreen®

High Availability

Troubleshooting -

Firebox X Resetting

Rebuilding your configuration

Backing Up/Restoring your Firebox Image.

WatchGuard Support Programs

Top

DNS Proxy Configuration.

The DNS proxy is configured simply by allowing it incoming to your DNS server.

Note:  If you do not host a DNS server for public access behind your Firebox you should NOT use the DNS proxy.  Use the DNS packet filter instead.

To add the DNS proxy, click on the + in policy manager to add services, and add the proxy service DNS.

Set the incoming tab to "enabled and allowed".  In the "To:" field, click the Add button and then click the NAT button.

The external IP should be the external IP of your Firebox, enter the internal IP of the DNS server you are hosting.  In this example it is 192.168.50.5.

Click OK and the incoming is complete.

Leave the outgoing tab as ANY to ANY enabled and allowed.  Click OK and save this to the Firebox.

Additional information about the DNS proxy is available at the WatchGuard website using the links below.

Detailed information about the DNS proxy

Non-allowed query type messages after installing the DNS Proxy

Not of class Internet messages after installing the DNS Proxy

Top      User Forum