Edge SWG DNS query over TCP

Products

• ISG Proxy
• ProxySG Software - SGOS

Issue/Introduction

Is it possible to force DNS queries from the Edge SWG (formerly ProxySG) to use TCP instead of UDP?

Resolution

No. There is no option for the Edge SWG to send DNS queries over TCP instead of UDP.

The Edge SWG sends queries via UDP. It can also receive DNS over HTTPS (DoH) and respond, but it queries DNS via UDP for the response.

For more information regarding DoH, see Handling DNS-over-HTTPS Traffic