DNS servers used do not match across cluster members-paloaltonetworks-panos
Indeni will identify when two devices are part of a cluster and alert if the DNS servers they are using are different.
Review the DNS configuration on each device to ensure they match.
How does this work?
This script pulls the Palo Alto Networks firewall’s active configuration and extracts the configured DNS servers from there.
Why is this important?
Tracking the currently configured DNS servers on all devices is important to ensure consistent name resolution.
Without Indeni how would you find this?
An administrator may write a script to pull this data from devices and compare against a gold configuration.
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/parsers/src/panw/panos/show-config-running-m.ind
// Deprecation warning : Scala template-based rules are deprecated. Please use YAML format rules instead. package com.indeni.server.rules.library.templatebased.crossvendor import com.indeni.server.rules.RuleContext import com.indeni.server.rules.library.templates.SnapshotComparisonTemplateRule import com.indeni.server.sensor.models.managementprocess.alerts.dto.AlertSeverity /** * */ case class cross_vendor_dns_servers_comparison() extends SnapshotComparisonTemplateRule( ruleName = "cross_vendor_dns_servers_comparison", ruleFriendlyName = "Clustered Devices: DNS servers used do not match across cluster members", ruleDescription = "Indeni will identify when two devices are part of a cluster and alert if the DNS servers they are using are different.", severity = AlertSeverity.WARN, metricName = "dns-servers", isArray = true, alertDescription = "Devices that are part of a cluster must have the same DNS servers used. Review the differences below.", baseRemediationText = "Review the DNS configuration on each device to ensure they match.")()