By default, a DNS proxy service is created, but not enabled. To enable the DNS proxy in the Management Console go to Configuration > Services > Service Ports or Proxy Services. Then set it from Bypass to Intercept and save your changes.
Note: The ProxySG is not a DNS server. It does not perform zone transfers, and recursive queries are forwarded to other name servers.
You can configure the DNS proxy from the CLI using the following commands.
SGOS#(config services dns)create ip_address:port
For more information about the DNS proxy, including how to create a DNS proxy resolving name list through the CLI, please refer to Managing the DNS-Proxy in Chapter 5 of the Configuration and Management Guide (CMG).