Configuring DNS for Reports on Zenconsole

Zenconsole provides the following DNS enrichment options for reports:

• Configuring a DNS server for reverse IP lookups
• Reverse DNS queries for local IP addresses in real time

Figure 1. DNS Enrichment for Reports

To access the DNS Enrichment settings page, you can follow the steps listed below:

1. Select your firewall on Zenconsole.
2. Click Settings menu on the left-hand sidebar.
3. Click DNS Enrichment menu.

Setting Up DNS Enrichment for Reports

DNS server IP addresses are used to perform reverse IP lookups. To resolve hostnames for reports, you may follow the steps listed below:

1. Click on Add DNS Server IP address button in the DNS Enrichment for Reports pane.

2. Enter the DNS server IP address to be used for reverse IP lookups in the DNS server IP addresses field. You can specify local or external DNS servers for reverse IP lookups.

   

   Figure 2. DNS Server IP Address Settings

After setting up a DNS server IP address for enrichment, you can change the DNS server IP address by following the next steps:

1. Click on Change DNS Server IP address button in the DNS Enrichment for Reports pane.

   

   Figure 3. Changing DNS Server IP Address

2. Type new DNS server IP address which will be used for reverse IP lookups.

3. Click on Submit to save the changes.

To remove the DNS server IP address, you may follow the given steps listed below:

1. Click on the Delete button with X icon next to the IP address. This will open a dialog box.

2. Click Remove button for confirming the deletion of the DNS server IP address.

   

   Figure 4. Removing DNS Server IP Address

Enabling/Disabling Real-time Reverse DNS Queries

Enabling the real-time DNS reverse queries option will allow you to obtain the hostname of each IP address on your local network. To retrieve hostnames, Zenarmor employs MDNS and LLMNR packets.

In the DNS Enrichment for Reports pane, click the related toggle button to enable or disable the Perform real-time DNS reverse queries for local IP addresses feature.

Figure 5. Enabling/Disabling Real-time Reverse DNS Queries

Enabling/Disabling OPNsense Aliases for DNS Enrichment

You may use OPNsense Host Aliases for DNS enrichment. When this feature is enabled, the alias name will be used in reports when a hostname cannot be obtained by a reverse DNS lookup.

You may click the Use OPNsense Host aliases for DNS Enrichment toggle button on the DNS Enrichment for Reports page to enable or disable the OPNsense Aliases for DNS Enrichment feature.