Networking Changes in PAN-OS 8.1

When the device uses a DNS proxy for the DNS Server setting, internal queries act according to the service route configuration to use the MGT interface or explicitly configured dataplane interface address.
PAN-OS 8.1 has the following change in default behavior for a networking feature:
FeatureChange
DNS Proxy
In releases prior to PAN-OS 8.1, when the Device uses a DNS Proxy Object for the DNS Server setting (instead of using the DNS Server’s address), internal DNS queries do not use the DNS Service Route Configuration if the service route is configured to use the management interface; instead, internal DNS queries use the address of the dataplane interface if a dataplane interface is configured on the DNS proxy object. This also occurs for a virtual system when the virtual system is configured with a DNS Proxy Object instead of defaulting to the global Device DNS Server settings.
Beginning with PAN-OS 8.1, when the Device uses a DNS Proxy Object for the DNS Server setting, internal DNS queries act according to the service route configuration to use the management interface or the explicitly configured dataplane interface address, whichever is configured.

Related Documentation