Details

Sets DNS server(s) to be used by the appliance to perform DNS queries

Rationale:

The security appliance may perform DNS queries in order to achieve URL filtering or threat protection against Botnet traffic.

Solution

Configure DNS services through Firepower Management Center:

Step 1 – Choose Policies > Access Control > DNS.

Step 2 – Click Add DNS Policy

Supportive Information

The following resource is also helpful.

• https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623.html

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Cisco.

References

• 800-53|SC-20

Source

• Tenable.com/audits