Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=DNS-protection-network-setup-third-party-firewall

Configure a third-party firewall to use DNS Protection

You can configure a third-party firewall to use DNS Protection as the DNS forwarder. To do this, you must add the DNS Protection IP addresses to the firewall.

To configure a third-party firewall, do as follows:

  1. In Sophos Central, go to My Products > DNS Protection > Installers.

  2. Next to IP addresses, click Copy to copy the DNS Protection IP addresses.

    You copy two IP addresses. You can use them as the primary and secondary DNS servers to configure redundancy.

  3. Add the two DNS Protection IP addresses to your firewall as DNS servers.

    Add one of the IP addresses as the primary DNS server and the second as the secondary DNS server.

    Note

    Depending on your firewall, you may have the option to add a third DNS server. We don't recommend this. If the firewall switches to the third DNS server, you'll lose the protection offered by DNS Protection.

More resources