3.33. DNSProfile

Description

A DNS Profile can be used by one or many IP Policies which has its service object configured with DNS as protocol.

Properties

Name
Specifies a symbolic name for the Profile. (Identifier)
MaxUDPQueryLength
Maximum payload size in DNS queries over UDP. (Default: 4096)
MaxUDPResponseLength
Maximum payload size in DNS responses over UDP. (Default: 4096)
MaxTCPQueryLength
Maximum message size in DNS queries over TCP. (Default: 4096)
MaxTCPResponseLength
Maximum message size in DNS responses over TCP. (Default: 4096)
LogDNSLookups
Enable Logging of Resolved DNS Queries and Replies. (Default: Yes)
PopulateDNSCache
Populate the system's DNS-cache when new IP addresses are discovered. This must be enabled when Wildcard FQDN address objects are in use. (Default: Yes)
RecursionDesiredFlag
Policy for handling the Recursion Desired flag in DNS messages. (Default: Allow)
MaxQuestionEntries
Maximum number of question entries. (Default: 1)
AllowAllClasses
Allow all DNS Record classes. (Default: No)
AllowedClasses
List of allowed DNS Record classes in DNS queries and reponses. (Default: IN)
AllowAllTypes
Allow all DNS Record types. (Default: Yes)
AllowedTypes
List of allowed DNS Record types in DNS queries and responses.
ScrambleQueryID
Mitigation against cache poisoning. Scrambles message IDs in queries sent over UDP, and de-scrambles them before delivering the reply. (Default: Yes)
Attribute
Special Attribute of the current object. (Optional)
Comments
Text describing the current object. (Optional)