FirewallDNS
    Enterprise Firewalls

    How to Change DNS on Sophos Firewall (XG / XGS)

    By [FILL IN], [FILL IN] · Last updated

    Sophos Firewall uses the DNS settings under Network for itself and DHCP.

    Before you start

    You need a FirewallDNS account (see pricing). Sign in to your dashboard, register your public IP address and copy your DNS server addresses. Replace <FIREWALLDNS-PRIMARY> and <FIREWALLDNS-SECONDARY> below with them.

    Step by step

    1. Go to Network > DNS.
    2. Choose "Static DNS" and enter <FIREWALLDNS-PRIMARY> and <FIREWALLDNS-SECONDARY>.
    3. Go to Network > DHCP, edit the server and set Primary/Secondary DNS to the FirewallDNS addresses (or to the firewall IP if using it as proxy).
    4. Add a firewall rule blocking DNS from LAN to WAN except to FirewallDNS.
    5. Apply.

    Verify it works

    1. Renew DHCP on a client (Windows: ipconfig /renew, macOS: reconnect Wi-Fi).
    2. Run nslookup example.com and check which server answered.
    3. Open the live log in your dashboard. New lookups should appear within seconds.

    Learn more

    Not protected yet?

    FirewallDNS costs $2.90 per device per month.