3.1 Ensure DNS services are configured correctly - name-server

Information

Sets DNS server(s) to be used by the appliance to perform DNS queries

Rationale:

The security appliance may perform DNS queries in order to achieve URL filtering or threat protection against Botnet traffic.

Solution

Step 1: Run the following to enable the DNS lookup

hostname(config)# dns domain-lookup <interface_name>

<interface_name> is the name of the interface connected to the DNS server

Step 2: Configure the group of DNS servers

hostname(config)# dns server-group DefaultDNS

Step 3: Acquire the enterprise authorized DNS servers' IP addresses <dns_ip_address> and for each of them, run the following command to configure the DNS server in the DNS server group

hostname(config-dns-server-group)#name-server <dns_ip_address>

See Also

https://workbench.cisecurity.org/files/3294

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-2, CSCv7|11.1

Plugin: Cisco

Control ID: 211b1c2129f884e793ff664250a67c83926ff503af5cfacc40540a3284a324be