FQDN Address Groups - optimal setting for TTL on this obj *
I have FROM TSR:
FQDN Object Cache:
NEXT EXPIRY: 06/30/2022 10:04:40.000
I read: https://www.sonicwall.com/support/knowledge-base/impact-of-fqdn-address-objects-on-the-cpu/171004095251533/
I have this setting on object
Which is the optimal setting for TTL on this obj ?
In TSR I have this setting:
Network Object Manager
Refresh sub-domains of wild card FQDN address objects: Disabled
Retain expired FQDN hosts until a successful DNS resolution occurs: Disabled
Donot delete expired hosts of an FQDN Network Object with active connections: Disabled
Default TTL value: 360 seconds
DNS query retry threshold: 3
DNS query maximum retry threshold: 500, Retry Interval: 300 seconds
Stop DNS queries for Custom FQDN objects after maximum threshold: Yes
Stop DNS queries for Default FQDN objects after maximum threshold: No
Number of FQDN objects that have stopped DNS query: 3
Default poll timeout: 60.000 seconds
Minimum poll timeout: 0.050 seconds
@Alberto did you read this KB article?
Do you expect a high load on the firewall because of to much records which need to be resolved? Usually I would not overwrite the TTL if not necessary and live with the TTLs provided by the DNS, but this might not fit here.