DNS mode web filtering

[LanceMc]

Hi, My previous question received no replies so I will break it down. I would like to test DNS Inspection mode for the web filtering. I can' t find any documentation of the steps to configure this. Do the clients need to use the Fortigate as their DNS server? TIA

[pcraponi]

No. You don' t need (and cannot) use Fortigate as your DNS Server for DNS Webfiltering... DNS Webfiltering are a resource that Fortigate " capture" a DNS query and did a Block/Allow with this information. So, the users need use an " external" DNS server and you will need apply DNS WebFiltering profile to this firewall rule. Regards, Paulo Raponi

[LanceMc]

Thanks for your reply Paulo. We will test this configuration and see if we can get it to work.