I currently have a parent firewall policy that has common rules in it that are to be shared with other firewall policies. However, I want to add application rules that use FQDNS into the parent policy and to do so need to enable DNS Proxy.
I have a set of DNS IP's on the parent policy, however in some of my hubs, the DNS server IP's are different on the firewall policies than the one in the parent policy. My question is, if I associate the parent policy to the child policy which DNS settings would it use?
Would the DNS settings in the child policy override the ones from the parent policy? If this is the case - does that mean I can inherit the app rules from the parent policy and it will use the child policies own DNS settings for those rules? Or will it still use the parent policies DNS settings for those inherited app rules?
I've read up on some Microsoft documentation, however, it seems to be a bit vague. If anyone knows please let me know... It would be a huge help.
Microsoft documentation I looked at: https://learn.microsoft.com/en-us/azure/firewall/dns-settings " A child policy inherits all parent policy DNS settings, but it can override the parent policy."