DNS Resolution in Tracker

[CheckMan]

Hi, how can I see the DNS name instead of IP address in Source or Destination in SmartView Tracker?


Check Man

[Lackie]

In Tracker, click on Query and make sure there is a check in front of 'Resolve IP'. If it can be resolved then it should put in the DNS name.

Not sure if the resolving is done from the management station or the log server if you have them set up on different servers.

[CheckMan]

No, the resolution is done with the node defined locally in CheckPoint...

[CheckMan]

I found it! Just put our internal DNS in the Networking setting in SecurePlatform web page....

Thanks!

[alienbaby]

Name Resolution is done by the management server. First against the Node and CheckPoint objects defined in the CheckPoint GUI, and then using DNS sourced from the management server. So defining DNS on the Management server is a good idea, and defining DNS servers on the Firewall Modules is usually unneeded.

[CheckMan]

Hi, What do you mean by Management Server? SmartDashboard?

Thanks

[Lackie]

SmartDashboard is the Gui Client that you use to connect to the Management Station (also known as the SmartCenter Server). It can be on the same PC, or it could be on different appliances alltogether. When you start up SmartDashboard there will be a spot to put in the name or IP address of the SmartCenter Server. That is your Management Station and where all of the management for CheckPoint happens and usually (by default) where all of the logs are sent from the firewall(s).

[CheckMan]

Where I can define my DNS in the SmartDashboard?

Thanks

[Lackie]

You don't set DNS in SmartDashboard. You would set it on the operating system that the managment station is on.

[Hank69]

Depending on the speed at which your Tracker screen is displaying log entries, you may see a lag time in resolution as the Management station works to resolve each IP.