How to check DNS Filtering service availability?
SonicAdmin80
Cybersecurity Overlord ✭✭✭
Got a call from two sites, neither could access anything online. Turns out the SonicWall DNS Filtering service wasn't working so I had to disable it to get them online again.
I couldn't find any way to check the service health on the firewall itself, there's nothing related to it Diagnostics view.
Is there any way to check the service health? I know it's a third party service but I can't remember the name.
Category: Firewall Security Services
0
Answers
After searching it seems it's Neustar UltraDNS. They have a site for service health: https://status.ultradns.com
But no indication of any errors. Perhaps the issue is between SonicWall and Neustar but no way to know. I didn't have debug logging on so nothing relevant in the logs.
Got a call from a third site that they couldn't go online. I enabled debug logging and enabled all log categories for DNS Filtering and asked them to again open a website. But nothing else in the logs except "DNS Filtering - DNS Query Received".
According to previous log hits, there probably should be "DNS Response Received" & "DNS Packet Allowed" messages if the query succeeds and is allowed but none of those. So looks like a service outage.
https://status.sonicwall.com/ two different DNS services listed there but neither are showing any issues. I don't know if "Secure DNS Service" is the service of interest here.
Yes it's not very clear if it's related. The appliances should really have a status check and test for this.