IPs from DNS snooping cache

Use the integrated DNS-snooping cache in the Packet Forwarding Engine with the DNS module on the Routing Engine to unify entries from explicit DNS queries and DNS-snooping in the data plane. The combined DNS cache remains accurate and relevant, helping you apply DNS-based policies and destination network address translation (NAT) configurations effectively.

The show security dns-cache command displays entries from both the DNS resolver and DNS-snooping.