Concurrent Support for IPv4 and IPv6 DNS Servers

You can now specify up to ten IPv4 and IPv6 DNS servers in a single client settings configuration.
Software Support
: Starting with PAN-OS® 9.0
You can now specify up to ten IPv4 and IPv6 DNS servers in a single client settings configuration on the GlobalProtect gateway. This enhancement simplifies the gateway configuration by enabling you to simultaneously assign multiple IPv4 and IPv6 DNS servers to connecting endpoints that receive the specified client settings configuration. For example, if your GlobalProtect deployment supports both IPv4 and IPv6 connections, you will need to specify a separate set of primary and secondary DNS servers for each IP address type in order to resolve both IPv4 and IPv6 DNS queries. By specifying both IPv4 and IPv6 DNS servers in the same client settings configuration, the GlobalProtect app can resolve both IPv4 and IPv6 queries over the VPN tunnel after establishing a connection.
Use the following steps to specify the DNS servers to which the GlobalProtect app can send DNS queries:
  1. Enable tunneling.
    1. From your gateway configuration (
      Network
      GlobalProtect
      Gateways
      <gateway-config>
      ), select
      Agent
      Tunnel Settings
      to enable
      Tunnel Mode
      .
    • To specify the DNS servers to which the GlobalProtect app with this client settings configuration can send DNS queries, select
      Network Services
      and then enter the IP address of the
      DNS Server
      . You can add up to 10 DNS servers by separating each IP address with a comma.
    multiple-dns-servers.png
  2. Commit
    the changes.

Recommended For You