Configuration
General
Section titled “General”Navigate to Services -> DNS Resolver -> General Settings
- Check
Enable DNS Resolver - Uncheck
Enable DNSSEC Support - Check
Enable Forwarding Mode - Check
Use SSL/TLS for outgoing DNS Queries to Forwarding Servers - Check
Register DHCP static mappings in the DNS Resolver - Click 💾Save
- Click ✔️Apply Changes

Advanced
Section titled “Advanced”Navigate to Services -> DNS Resolver -> Advanced Settings
- Check
Prefetch Support - Uncheck
Harden DNSSEC Data - Check
Serve Expired Message Cache Size: 50MBNumber of Hosts to Cache: 20000- Click 💾Save
- Click ✔️Apply Changes
