DNS Controls

[matthew_smith_8]

Hello,

Our WCF (Umbrella) relies on devices using specific DNS servers. Currently I am able to statically assign a DNS server and bypass this security. Is there a way to prevent clients from connecting if they have statically assigned a DNS server?

We are using R510 and R310 Unleashed.

[michael_brado]

We have a CLI WLAN configuration command "force-dhcp" which will disallow clients with a static IP, but I don't think we look at router-provided or client defined DNS hosts.

[tim_brumbaugh]

Easy solution, block out bound DNS requests on your firewall port 53 outbound, only allow your dc's outbound on port 53 which you should do anyways as part of a good Cyber Security plan.

[michael_brado]

Thumb's Up!

[matthew_smith_8]

Thanks for the replies guys. Tim that's a great point. We have, currently, chosen not to deploy Firewalls though, since this is for our branch office public Guest networks and are entirely separated from our corporate network.