Configure DNS on ASA

Updated: July 17, 2026

Want to summarize with AI?

Learn how to configure DNS on ASA, including DNS, HTTP, SSH, NTP, logging, sysopt, and device association settings.

Use this procedure to configure a domain name server (DNS) on each of your ASAs.

Prerequisites

The ASA must be able to reach the internet.
Before you begin, gather this information:
- The name of the ASA interface that can reach the DNS server; for example, inside, outside, or dmz.
- The IP address of the DNS server your organization uses. If you don't maintain your own DNS server, you can use Cisco Umbrella. The IP address for Cisco Umbrella is 208.67.220.220.

Procedure

	1.	In the left pane, click Security Devices.
	2.	Click the Devices tab.
	3.	Click the ASA tab and select all the ASAs on which you want to configure DNS.
	4.	In the Actions pane to the right, select Command Line Interface.
	5.	Click the CLI macro favorites star.
	6.	Select the Configure DNS macro in the Macros panel.
	7.	Se;ect >_View Parameters and in the parameters column, fill in the values for these parameters: IF_Name - The name of the ASA interface that can reach the DNS server. IP_ADDR - The IP address of the DNS server your organization uses.
	8.	Click Send to devices.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.