Athena SWG (Secure Web Gateway)

Athena SWG (formerly Internet Access Gateway) ensures visibility and control across the network, detecting risks like unauthorized access, non-compliant activities, and data leaks to manage endpoints.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
13.0.120
Athena SWG (Secure Web Gateway) {{ breadTitle }} User Manual Functions Bandwidth Management DNS Proxy Precautions
{{sendMatomoQuery("Athena SWG (Secure Web Gateway)","Precautions")}}

Precautions

{{ $t('productDocDetail.updateTime') }}: 2025-12-29
  1. The scenario of redirecting to the LAN DNS server: The DNS proxy action redirects to the DNS server in the LAN (the DNS server is in the DMZ zone).

Outcomes:

Redirection to the DNS server in the LAN fails (if the user's PC is configured with an effective DNS server and uses its own DNS server, an ineffective DNS server will result in network disconnection).

Solution:

Configure the firewall to allow DMZ > LAN traffic.

  1. In the scenario of starting global exclusion and pass-through, is the DNS server proxy still functioning?

Configure the DNS server to Drop packet. After adding the domain name to global exclusion, the Drop packet of the DNS server proxy stops being effective.

After starting the pass-through, the DNS server proxy does to take effect.

  1. In the bridge mode, DNS detection detects by sending a package from the DMZ interface. The deployment scenario should ensure the package sent from the DMZ interface can reach the port.