# Add rules to allow dynamic DNS updates

You might need to add a rule that allows the dynamic DNS updates from your firewall to the specified DNS server.

##

The Firewall Template allows this traffic by default. If your policy is based on an unmodified Firewall Template, there is no need to add a rule that allows Dynamic DNS updates.

For more details about the product and how to configure features, click Help or press F1.

## Steps

1. Right-click the Firewall Policy, then select Edit.
2. Add the following type of Access rule:
   - Source: the address (toward the DNS server) of the Firewall or NDIs of all nodes in the Firewall Cluster
   - Destination: the DNS server
   - Service: the DNS Service Group
   - Action: Allow
3. Save and install the policy.