Gateway

Resolving DNS Servers Located in the Secure Network

January 8, 2024

Contributed by:

C S C

If your DNS server is located in the secure network behind a firewall and the firewall is blocking ICMP traffic, you cannot test connections to the server because the firewall is blocking the request. You can resolve this issue by doing the following steps:

Creating a DNS service with a custom DNS Monitor that resolves to a known fully qualified domain name (FQDN).
Creating a non-directly addressable DNS virtual server on Citrix Gateway.
Binding the service to the virtual server.

Note:

Configure a DNS virtual server and DNS service only if your DNS server is located behind a firewall.
If you install a Citrix ADC load balancing license on the appliance, the Virtual Servers and Services node does not appear in the navigation pane. You can perform this procedure by expanding Load Balancing and then clicking Virtual Servers.

To configure a DNS service and DNS Monitor

In the configuration utility, on the Configuration tab, in the navigation pane, expand Virtual Servers and Services and then click Virtual Servers.
In the details pane, click Add.
In Name, type a name for the service.
In Protocol, select DNS.
In IP Address, type the IP address of the DNS server.
In Port, type the port number.
On the Services tab, click Add.
On the Monitors tab, under Available, select DNS, click Add, click Create, and then click Close.
In the Create Virtual Server (Load Balancing) dialog box, click Create, and then click Close.

Next, create the DNS virtual server. For details, see To configure a DNS virtual server and then bind the DNS service to the virtual server.

To bind a DNS service to a DNS virtual server

In the Configure Virtual Service (Load Balancing) dialog box, on the Services tab, click Add, select the DNS service, click Create, and then click Close.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Resolving DNS Servers Located in the Secure Network

January 8, 2024

Contributed by:

C S C

January 8, 2024

Contributed by:

C S C

Resolving DNS Servers Located in the Secure Network

To configure a DNS service and DNS Monitor

To bind a DNS service to a DNS virtual server

In this article