WSM User Guide - WatchGuard Technologies

Configuring the DNS ProxyAdding a new query types rule1 To add a new query types rule, click Add.The New Query Types Rule dialog box appears.2 Type a name for the rule.Rules can have no more than 31 characters.3 DNS query types have a resource record (RR) value. Use the arrows to set the value.For more information on the values of DNS query types, see RFC 1035.4 Set an action for the rule and configure to send an alarm or enter the event in the log file. For moreinformation, see “Defining Rules” on page 161.Configuring DNS query namesA DNS query name refers to a specified DNS domain name, shown as a fully qualified domain name(FQDN).1 From the Categories section, select Query Names.2 To add more names, do the steps used to create rules. For more information, see “Defining Rules” onpage 161.Enabling intrusion prevention for DNSAlthough you can use the proxy definition screens to activate and configure IPS, it is easier to use theTasks menu in Policy Manager to do this. For more information on how to do this, or to use the IPSscreens in the proxy definition, see the chapter “Using Signature-Based Security Services.”Configuring DNS proxy alarmsUse these settings to set criteria for a notification event:1 From the Categories section, select Proxy Alarm.2 Do the procedure in “Using dialog boxes for alarms, log messages, and notification” on page 164.182 WatchGuard System Manager