Fortinet FortiGate Series Administration Guide

System Network Configuring FortiGate DNS services
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903 205
http://docs.fortinet.com/ • Feedback
DNS Servers
Several FortiGate functions use DNS, including alert email and URL blocking. You can
specify the IP addresses of the DNS servers to which your FortiGate unit connects. DNS
server IP addresses are usually supplied by your ISP.
You can configure FortiGate models numbered 100 and lower to obtain DNS server
addresses automatically. To obtain these addresses automatically, at least one FortiGate
unit interface must use the DHCP or PPPoE addressing mode. See “Configuring DHCP
on an interface” on page 188 or “Configuring an interface for PPPoE” on page 190.
FortiGate models 100 and lower can provide DNS Forwarding on their interfaces. Hosts
on the attached network use the interface IP address as their DNS server. DNS requests
sent to the interface are forwarded to the DNS server addresses that you configured or
that the FortiGate unit obtained automatically.
Configuring FortiGate DNS services
You can configure a FortiGate unit to be the DNS server for any networks that can
communicate with a FortiGate interface. You set up the DNS configuration for each
interface in one of the following ways:
• The interface relays DNS requests to the DNS servers configured for the FortiGate unit
under System > Network > Options. See “To configure a FortiGate interface to relay
DNS requests to external DNS servers” on page 207.
• The interface resolves DNS requests using a FortiGate DNS database. DNS requests
for host names not in the FortiGate DNS database are dropped. See “To configure a
FortiGate interface to resolve DNS requests using only the FortiGate DNS database”
on page 207.
• The interface resolves DNS requests using the FortiGate DNS database and relays
DNS requests for host names not in the FortiGate DNS database to the DNS servers
configured for the FortiGate unit under System > Network > Options. This is called a
split DNS configuration.See “To configure a split DNS configuration” on page 208
If virtual domains are not enabled you can create one DNS databases that can be shared
by all the FortiGate interfaces.
If virtual domains are enabled, you create a DNS database in each VDOM. All of the
interfaces in a VDOM share the DNS database in that VDOM.
This section describes:
• About split DNS
• Configuring FortiGate DNS services
IPv6 DNS Settings
Primary DNS Server Enter the primary IPv6 DNS server IP address.
Secondary DNS Server Enter the secondary IPv6 DNS server IP address.
Dead Gateway Detection Configure Detect Interface Status for Gateway Load Balancing for
one or more FortiGate interfaces and use the dead gateway
detection settings to configure how interface status detection
functions. For information, see “Interface status detection for
gateway load balancing” on page 193.
Detection Interval Enter a number in seconds to specify how often the FortiGate unit
detects interface status.
Fail-over Detection Enter the number of times that interface status tests fail before the
FortiGate unit assumes that the interface is no longer functioning.

Fortinet FortiGate Series Specifications

General

Model	FortiGate Series
Category	Firewall
Throughput	Varies by model
Interfaces	Varies by model
Concurrent Sessions	Varies by model
VPN Support	Yes
High Availability	Yes
Firewall Throughput	Varies by model
VPN Throughput	Varies by model
IPS Throughput	Varies by model
NGFW Throughput	Varies by model
Threat Protection Throughput	Varies by model
New Sessions per Second	Varies by model
Power Supply	Varies by model
Security Features	Firewall, IPS, Application Control, Web Filtering, Antivirus, VPN
Virtual Domains	Yes
Form Factor	Desktop, Rackmount