3.1 Ensure DNS services are configured correctly - name-server

Information

Sets DNS server(s) to be used by the appliance to perform DNS queries

Rationale:

The security appliance may perform DNS queries in order to achieve URL filtering or threat protection against Botnet traffic.

Solution

* Step 1: Run the following to enable the DNS lookup

HOSTNAME(CONFIG)# DNS DOMAIN-LOOKUP _<interface_name>_ <interface_name> is the name of the interface connected to the DNS server</div>

* Step 2: Configure the group of DNS servers

HOSTNAME(CONFIG)# DNS SERVER-GROUP DEFAULTDNS

* Step 3: Acquire the enterprise authorized DNS servers' IP addresses <dns_ip_address> and for each of them, run the following command to configure the DNS server in the DNS server group

HOSTNAME(CONFIG-DNS-SERVER-GROUP)#NAME-SERVER _<dns_ip_address>_

See Also

https://workbench.cisecurity.org/files/1903

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-2, CSCv7|11.1

Plugin: Cisco

Control ID: d22c29ad08173aef98e8233b9a31fcf7ddb1f0564b4084d78dc9816126a4aaf9