Enable reverse DNS Lookup for path tracing to restrict DNS lookups on public only and
private IP addresses discovered between source and target during path tracking.
Where Can I Use
This? | What Do I Need? |
- Prisma Access (Managed by Strata Cloud Manager)
- Strata Cloud Manager
|
|
You can control DNS lookups on IP addresses discovered between source and target
endpoints during DNS path tracing. By default, ADEM performs a reverse DNS lookup to
identify the hostname of every IP address it encounters. However, DNS lookups on
private IP addresses (
RFC1918) fail to resolve which adds to DNS
traffic. The reverse DNS lookups are performed on the below RFC1918 private address
ranges:
10.0.0.0- 10.255.255.255 (10/8 prefix)
172.16.0.0- 172.31.255.255 (172.16/12 prefix)
192.168.0.0- 192.168.255.255 (192.168/16 prefix)
You can configure ADEM to perform reverse DNS lookups only for public IP addresses,
ignoring all private ranges. If not explicitly configured, ADEM performs DNS lookup
on both public and private IP addresses.