Azure Firewall now
supports DNS flow trace logs — a new logging capability that gives you deep,
end-to-end visibility into DNS traffic and name resolution paths. This
enhancement provides richer telemetry to help you troubleshoot, validate, and
secure DNS flows across your network.
DNS flow trace logs
build on existing DNS Proxy functionality by logging critical metadata
including query types, response codes, queried domains, upstream DNS servers,
and the source and destination IPs of each request. These insights enable
faster diagnosis of application connectivity issues, improved auditing, and
better security investigations.
Key highlights
- End-to-end DNS visibility — see each step of DNS resolution
across your environment
- Faster troubleshooting — pinpoint DNS failures and validate forwarding and
custom DNS configuration
- Cache insights -- determine
whether the Azure Firewall cache was used for DNS resolution
Learn more: