Configuring DNS filtering on Azure
In order for DNS filtering to work properly in FortiGate CNF instance policies, the Azure environment must be configured.
By default, compute resources within a resource group use Azure internal DNS servers. The DNS traffic will stay inside the Azure network and will not be routed to the deployed FortiGate CNF instance. DNS configurations must be changed to route those DNS requests to an external DNS server to be scanned by the FortiGate CNF instance.
To configure DNS requests:
-
In the Azure resource group, create a new virtual network.
-
In the new virtual network, edit DNS servers.
-
Set DNS servers to Custom and enter the IP addresses of the external DNS servers.
-
Click Save.