DNS Query over IPSec VPN with Content filter

Ephraim
Ephraim Posts: 3  Freshman Member
First Comment
in Security

Hi
We have two sites that are connected with IPSec. We send all DNS requests from site A to site B, the DNS server on site B is a USG Flex Firewall.
My problem is that all DNS responses for site A are unfiltered. Is it possible to use the DNS content filter for the for the DNS Request coming from Site B?

Thanks for your Help

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 3,085  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @Ephraim,

    We recommend that each firewall has a security license to ensure the security services' functioning.

    Zyxel Melen


  • Ephraim
    Ephraim Posts: 3  Freshman Member
    First Comment

    Yes, I understand that my problem is that the firewall on Site-B cannot be replaced and has no security options such as a content filter.


    Is there any way to do this or not?

  • PeterUK
    PeterUK Posts: 3,693  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited March 25

    so what you need but not sure it will work is a policy rule from IPSec VPN to Zywall with the DNS content filter or if that don't work run a DNS server on site B have site A point to DNS server then DNS server goes to FLEX with a policy rule with the DNS content filter

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）