Showing results for 
Search instead for 
Did you mean: 

MWG - DNS issue


we are evaluating MWG (15726) and have the problem sometimes websites load very slowly.

In chart  „General Performance“  we can see DNS lookups sometimes take a long time.

We changed DNS settings and configured „Conditional Forwarding“ about 8:40 a.m.

Any ideas why DNS querys do not work fine with „Conditional Forwarding“ disabled?

Best regards.


on 18.09.13 13:04:57 MESZ
2 Replies

Re: MWG - DNS issue

I don't have my 7.3 system up at the moment, but here is what I can remember from when I was playing with that feature.

When you are using the standard DNS settings the MWG will ask your DNS server everytime I needs to know an address.  If your DNS server has issues, as seems to be the case here, these lookups can take longer than they should, delaying your web traffic.

When enabling the conditional forwarders, the MWG starts its own BIND instance and performs all queries against that.  From there the local instance can cache entries and provide answers even when the normal resolvers are unresponsive.  All queries go through the local instance, it only behaves differently for the domains that you have configured in the conditional list.

Re: MWG - DNS issue

MWG contains its own cache for DNS. Negative entries (host is unknown) are cached only for a very short time (few seconfs).

If MWG does not get a reply for a DNS query, it waits (up to 30s for each cinfigured name server). If you use the same address again and again, you will get a big delay every few seconds.

Using conditional DNS uses bind running on local host. If bind caches queries without response for a longer time, it is much faster.

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support
  • The McAfee ePO Support Center Plug-in is now available in the Software Manager. Follow the instructions in the Product Guide for more.