DNS Request Route doesn't work when H.A auxiliary becames primary

Do you use V17.5 MR8 / 9 ? 

 V17.5 MR9

Is the DNS request route in any case "special"? Lets say behind a IPsec Tunnel or direct attached to one Interface? 

How can the XG reach the DNS Server? 

Exactly, this server is behind an IPSec, the server is unfortunately not local.
Then my XG connects to it through an IPsec.

I read something about an Bug in this scenario. I guess the fix will be implemented in the next release, but i am not sure... 

Maybe  can look up? 

Do you already logged a Support Case? 

You installed a IPsec Systraffic NAT Rule? 

Something like this: https://community.sophos.com/kb/en-us/123336

As far as i know, the Appliance after an Takeover misses the route and cannot reach the DNS Server anymore (because IPsec). 

That issue will be resolved anyway in V18 GA, because you can easily move to VTI (Virtual Tunnel interface) IPsec and use static routing. 

But until GA of V18, there could be an fix. 

Hi LuCar Toni, 

I did not find any reported bug with this scenario, I would suggest to open a support case if it hasn't been open yet. Once you (Luana Farias) open a support case, please PM me the case number. 

Thanks,

I opened the ticket and sent to you in PM.

Thanks guys.

I opened the ticket and sent to you in PM.

Thanks guys.