Configure a DNS Server Profile, which simplifies configuration of a virtual system. The Primary DNS or Secondary DNS address is used to create the DNS request that the virtual system sends to the DNS server.
Configure a DNS Server Profile
Name the DNS server profile, select the virtual system to which it applies, and specify the primary and secondary DNS server addresses. Select Device > Server Profiles > DNS and click Add. Enter a Name for the DNS server profile. Select the Location (virtual system) to which the profile applies. For Inheritance Source, from the drop-down, select None if the DNS server addresses are not inherited. Otherwise, specify the DNS server from which the profile should inherit settings. If you choose a DNS server, click Check inheritance source status to see that information. Specify the IP address of the Primary DNS server, or leave as inherited if you chose an Inheritance Source. Keep in mind that if you specify an FQDN instead of an IP address, the DNS for that FQDN is resolved in Device > Virtual Systems > DNS Proxy. Specify the IP address of the Secondary DNS server, or leave as inherited if you chose an Inheritance Source.
Configure the service route that the firewall automatically uses, based on whether the target DNS Server has an IP address family type of IPv4 or IPv6. Click Service Route IPv4 to enable the subsequent interface and IPv4 address to be used as the service route, if the target DNS address is an IPv4 address. Specify the Source Interface to select the DNS server’s source IP address that the service route will use. The firewall determines which virtual router is assigned that interface, and then does a route lookup in the virtual router routing table to reach the destination network (based on the Primary DNS address). Specify the IPv4 Source Address from which packets going to the DNS server are sourced. Click Service Route IPv6 to enable the subsequent interface and IPv6 address to be used as the service route, if the target DNS address is an IPv6 address. Specify the Source Interface to select the DNS server’s source IP address that the service route will use. The firewall determines which virtual router is assigned that interface, and then does a route lookup in the virtual router routing table to reach the destination network (based on the Primary DNS address). Specify the IPv6 Source Address from which packets going to the DNS server are sourced. Click OK.
Save the configuration. Click OK and Commit.

Related Documentation