Configure DNS Service on the ION Device

Configure the Prisma DNS Service on the ION
After you configure the DNS Service Roles and DNS Service Profiles, enable the DNS Service at the device-level. Only a single instance is allowed per ION device. You can map a DNS Service Profile to a DNS Service, assign interfaces to the DNS service role mappings, and specify device-specific attributes. The DNS service can be enabled or disabled as required. To configure the DNS service on the ION device:
  1. Select a device from
    Map
    Claimed Devices
    DNS Service
    on the device information screen.
  2. Configure the
    Service Info
    tab.
    1. Enable the DNS service to ensure that the DNS profile selected is not optional.
    2. Enter a Name,
      (Optional)
      Description
      , and include
      (Optional)
      Tags
      for the DNS Service.
    3. Select to maintain strict domain name and enable DNS loop detection options.
    4. Select a DNS Profile from the drop-down.
      These will include profiles that are created at the user interface level.
    5. (Optional)
      Include values for
      Max Concurrent DNS Queries
      and the
      Cache Size
      .
      The default value is 150.
    6. Click
      Add
      to bind a role to the DNS Service.
    7. In the
      Add New Record
      dialog, choose the DNS Role, select the
      Interface
      or enter the
      Interface IP
      .
  3. Configure the
    Queries Metadata
    tab.
    1. (Optional)
      Configure the metadata under
      Customer Premises Equipment
      .
      If the entered values differ from the DNS Service Profile, the DNS Service values is considered.
    2. In the
      Add New Record
      dialog, enter the
      (Optional)
      IP Address
      and the
      Prefix Length
      .
      This option is configured at both the user interface level and the device level.
  4. Configure the
    Domain Mapping
    tab.
    1. (Optional)
      Add the domain names to the configured IP address and the configured interfaces.
      If the entered values differ from the DNS Service Profile, the DNS Service values is considered.
    2. In the
      Domain to Interface
      section, click
      Add
      to enter the Domain Names and choose an
      Interface
      from the drop-down.
  5. Complete all configuration requirements and
    Submit
    .

Recommended For You