Unsecure updates DNS with Linux objects

Question

Hi,

I run a PingCastle audit in our infra and I have an issue regarding the fact that dns zones are configured with unsecure updates.

We have linux and network appliances in our AD. Can we set secure updates in the DNS zones or this is not recommended ?

Thanks

Answer 1

Hello there,

Yes, you can set secure updates in the DNS zones but with certain precautions.

Maintaining DNS records can be very challenging if it is done manually. That is why Microsoft DNS servers allow dynamic DNS updates but this needs to be enabled with caution as it needs to be done in a secure way. This Wiki article explains how DNS updates can be secured on Microsoft Windows DNS servers.

How to Secure DNS Updates on Microsoft DNS Servers

https://social.technet.microsoft.com/wiki/contents/articles/21984.how-to-secure-dns-updates-on-microsoft-dns-servers.aspx

How to configure DNS dynamic updates in Windows https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/configure-dns-dynamic-updates-windows-server-2003

------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–