Web Security - Configuring DNS Forwarders / Gateway

This article explains how to set up your DNS forwarders and is intended for use by Administrators.

The process for configuring your DNS forwarders differs according to your server. This guide describes how to configure your DNS forwarders on a Windows Server to use the Mimecast servers. If you're not using Windows Server, refer to your vendor's instructions for configuring your gateway.

Mimecast Web Security guards against malicious activity initiated by user action or by malware at the server level or front-line layer of the web.
It blocks access to business-inappropriate websites based on configured policies and features. You can protect your corporate network by sending all DNS requests to Mimecast. 

Prerequisites

1. Ensure you've met all required Prerequisites.
2. Ensure the egress IP has been added as a location. See Configuring Locations.

   To display block and warning pages for sites using SSL, the Mimecast Web Security Certificate needs to be deployed on devices that do not have the Mimecast Security Agent installed. See Mimecast SSL Certificate.

Configuring DNS Forwarders

To configure your DNS forwarders on Windows Server, use the following steps:

1. Start the Server Manager.
2. Click on the Tools | DNS menu item.
3. Right-click on the Hostname.
4. Click on the Properties menu item.
5. Click on the Forwarders tab.
6. Click on the Edit button.
7. Enter the Mimecast Server IP Address displayed in the DNS tab of Web Security | Certificate and DNS Setup in the Mimecast Administration Console; see Check Configuration below.
8. Click on the OK button.
   

   

Check Configuration

To check your configuration in Mimecast, use the following steps:

1. Log on to the Mimecast Administration Console.
2. Navigate to Web Security | Certificate and DNS Setup
3. Click on the DNS tab. The IP addresses of Mimecast Gateway's primary and secondary servers are displayed.
4. Click on the Check Configuration button to test your configuration. If your configuration is successful, the following dialog is displayed:

For detailed information on how to configure, optimize, integrate, and troubleshoot, see the Web Security Enablement Hub.