Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

TCP health check behavior for server addresses configured as FQDN

FQDN in Server Address in Health Check Configuration

  • SWG will do DNS query to get the IP addresses.
  • If DNS query fails, SWG will consider the server as Unhealthy.
  • If DNS returns single IP address, the behavior is same as that when an IP: Port is configured.
  • If DNS returns multiple IP addresses:
    • If a single IP is found healthy, the Server is considered as healthy.
    • If the first IP is found unhealthy, then go to the next IP address in the list.
    • For each IP address, the logic for determining the health is the same as that when IP: Port is configured.
  • During live traffic, SWG connects to healthy DNS-resolved IP. This avoids DNS queries for the live traffic.

  • Was this article helpful?