Check Point L-72 - Configuring the DNS Server; Configuring the Proxy Server

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 79
Configuring the DNS Server
In the Device > DNS page you can configure the DNS server configuration and define the domain
name.
To configure DNS:
1.
Select to define up to three DNS servers which is applied to all Internet connections or use the
DNS configuration provided by the active Internet connection (Primary).
If you select Configure DNS servers, make sure that you enter valid IP addresses.
Use the first option if your DNS servers are located in the headquarters office. In this case, all
DNS requests from this branch office are directed to these DNS servers.
The second option allows a more dynamic definition of DNS servers. The gateway uses the
DNS settings of the currently-active Internet connection (in case of static IP – the DNS
manually provided under "Internet connection"-> Edit, in case of DHCP / Dialers – the DNS
automatically provided by the ISP). If Internet Connection High Availability is enabled, the DNS
servers switch automatically upon failover.
2.
By default, the Check Point Appliance functions as your DNS proxy and provides DNS resolving
services to internal hosts behind it (network objects). This option is global and applies to all
internal networks.
To get IP addresses directly from the DNS servers defined above, clear the Enable DNS Proxy
checkbox.
When DNS proxy is enabled, Resolve Network Objects controls if the DNS proxy treats the
local network objects as a hosts list. When selected, the local DNS servers resolves network
object names to their IP addresses for internal network clients.
3.
Enter a Domain Name. There are two separate uses of the domain name:
• Local hosts (the Security Gateway and network objects) are optionally appended with the
domain name when DNS resolving is performed.
• DNS queries that do not contain a domain name are automatically appended with the
domain name.
Note these syntax guidelines:
• The domain name must start and end with an alphanumeric character.
• The domain name can contain periods, hyphens, and alphanumeric characters.
4.
Click Apply.
Configuring the Proxy Server
In the Device > Proxy page, you can configure a proxy server to use to connect to the Check Point
update and license servers.
To configure a proxy server:
1.
Select Use a proxy server.
2.
Enter a Host name or IP address.
3.
Enter a Port.
4.
Click Apply.