Create or edit a DNS translation entry
This setting allows you to translate a DNS resolved IP address to another IP address you specify on a per-policy basis.
For example, website A has a public address of 1.2.3.4. However, when your internal network users visit this website, you want them to connect to the internal host 192.168.3.4. You can use DNS translation to translate the DNS resolved address 1.2.3.4 to 192.168.3.4. Reverse use of DNS translation is also applicable. For example, if you want a public DNS query of your internal server to get a public IP address, then you can translate a DNS resolved private IP to a public IP address.
To create a DNS translation entry:
-
Go to Security Profiles > DNS Filter and enable DNS Translation.
-
In the DNS Translation table, select Create New. The New DNS Translation window opens.
-
Select the type of IP address to translate, either IPv4 or IPv6.
-
In the Original Destination field, enter the domain's original IP address.
-
In the Translation Destination field, enter the IP address that you want used instead of the original IP address.
-
Enter the network mask.
-
Enable or disable the status.
-
Click OK to save the DNS translation entry.
-
Click OK to save the DNS filter profile.
To edit a DNS translation entry:
-
Go to Security Profiles > DNS Filter and enable DNS Translation.
-
In the DNS Translation table, double-click on an entry or select an entry and then click Edit in the toolbar.
-
Edit the settings as required.
-
Click OK to save the DNS translation entry.
-
Click OK to save the DNS filter profile.