Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS timeouts when using XGS107 as dns server

Hello,

When I use Sophos as the DNS server, I sometimes get a timeout for the DNS resolution.

I also tried it directly from the XGS CLI.

CLI:

XGS107_SN01_SFOS 19.5.4 MR-4-Build718# nslookup google.de. 1.1.1.1
Domain Name Server# 1.1.1.1
Domain Name # google.de.
Resolved Address 1# 142.250.185.195
Total query time # 10.78 msec
Domain Name # google.de.
Resolved Address 1# 2a00:1450:4001:806::2003
Total query time # 10.80 msec


XGS107_SN01_SFOS 19.5.4 MR-4-Build718# nslookup google.de. 1.0.0.1
Domain Name Server# 1.0.0.1
Domain Name # google.de.
Resolved Address 1# 216.58.212.131
Total query time # 10.97 msec
Domain Name # google.de.
Resolved Address 1# 2a00:1450:4001:811::2003
Total query time # 10.58 msec


XGS107_SN01_SFOS 19.5.4 MR-4-Build718# nslookup google.de. 8.8.8.8
Domain Name Server# 8.8.8.8
Domain Name # google.de.
Resolved Address 1# 172.217.23.99
Total query time # 10.13 msec
Domain Name # google.de.
Resolved Address 1# 2a00:1450:4001:831::2003
Total query time # 17.83 msec


XGS107_SN01_SFOS 19.5.4 MR-4-Build718# nslookup google.de.
Domain Name Server# 127.0.0.1
Domain Name # google.de.
Resolved Address 1# 142.250.186.67
Total query time # 10.92 msec
can't resolve 'google.de.'

XGS107_SN01_SFOS 19.5.4 MR-4-Build718#




From a windows client:
PS C:\Users\x> nslookup.exe google.de 1.1.1.1
Server: one.one.one.one
Address: 1.1.1.1

Non-authoritative answer:
Name: google.de
Addresses: 2a00:1450:4001:813::2003
216.58.206.35

PS C:\Users\x> nslookup.exe google.de 10.10.0.1
Server: ttwg.local
Address: 10.10.0.1

Non-authoritative answer:
DNS request timed out.
timeout was 2 seconds.
Name: google.de
Address: 142.250.186.67




This thread was automatically locked due to age.
Parents
  • Hi,

    please try a tracert to see if a link is overloaded and run a long ping session to log for similar results.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • Hi,

    please try a tracert to see if a link is overloaded and run a long ping session to log for similar results.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

Children