Verification and Check

Verification

After configuring the DNS filtering feature, you can do as follows to check the configuration result:

1. Check the DNS filtering profile.

   Choose Object > Security Profiles > DNS Filtering, click the name of the DNS filtering profile to be checked, and verify that the parameter settings in the profile are correct.

2. Check the security policy.

   Choose Policy > Security Policy > Security Policy, click the name of the security policy to be checked, and verify that the content security part correctly references the DNS filtering profile.

Viewing Logs

After referencing the DNS filtering profile in the security policy, the FW checks the data of traffic matching the security policy. When the domain name in a DNS request matches the whitelist/blacklist/category whose action is alert or block in the DNS filtering profile or a DNS request is processed by safe search, a DNS filtering log will be generated.

Choose Monitor > Logs > System Log List to view DNS filtering logs.