3.1 Ensure DNS services are configured correctly - name-server

Information

Sets DNS server(s) to be used by the appliance to perform DNS queries

Rationale:

The security appliance may perform DNS queries in order to achieve URL filtering or threat protection against Botnet traffic.

Solution

Step 1: Run the following to enable the DNS lookup

hostname(config)# dns domain-lookup <interface_name>

<interface_name> is the name of the interface connected to the DNS server

Step 2: Configure the group of DNS servers

hostname(config)# dns server-group DefaultDNS

Step 3: Acquire the enterprise authorized DNS servers' IP addresses <dns_ip_address> and for each of them, run the following command to configure the DNS server in the DNS server group

hostname(config-dns-server-group)#name-server <dns_ip_address>

See Also

https://workbench.cisecurity.org/files/3246

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-20

Plugin: Cisco

Control ID: 985ca4885351895eaf8e0388c2e575630ea20a0cfd5e2c1f47546728eddcd1fa