---
title: Add DNS Forwarding
slug: add-dns-forwarding
docTags: 
createdAt: 2026-06-12T08:10:38.657Z
---

:::hint{type="info"}
Navigate to the sidebar menu: [Deployments](docId\:h62CnWLZ1OyHnHPKL5AS9) > [End-Points](docId\:xkBYB1hMatXzpTpHj00rU)  and ensure you are on the [Settings](docId:66hrMSVyUV-eTsvNBGniT) tab than click <font color="#2563eb">`+ Add DNS forwarding`</font> button..
:::

## Overview

The **Add DNS forwarding** panel allows you to configure the routing of a specific **domain** or subdomain to a third-party **DNS server**.

:::hint{type="info"}
**How it works:&#x20;**&#x42;y specifying a domain and assigning it to a **primary DNS** server IP, you ensure that all **requests** for that specific internal resource are correctly **resolved** by your designated **local server** rather than being sent out to the **public internet**.
:::

## Interface Overview

Use this configuration window to define the parameters of your new forwarding rule.

| ### Interface Element     | ### Description & Focus                                                                                                               |
| ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- |
| **Domain**                | The specific **domain** or subdomain you need to route to an **internal server**.                                                     |
| **Primary DNS server IP** | The internal **IPv4** or **IPv6** address of the **local DNS** server instructed to **resolve** queries for the specified **domain**. |
| **Add DNS forwarding**    | The **blue button** at the bottom of the window to save the **settings** and register the **new rule** in your configuration.         |

## Configuration & Logic

Setting up a dedicated **DNS forwarding** rule guarantees seamless access to your internal company servers. Once the domain and the primary IP are defined, the endpoint agent will intelligently split the DNS traffic. It will send internal network requests directly to your local server while continuing to protect and filter all other external internet traffic through the main security policy.