Not sure if I completely understand what the bluecoat appliance is doing, however if your goal is to "resolve dnsnames to local addresses for redirecting purposes."
Can you just use the Alternate DNS servers Overrides (Optional): section of the Networking - DNS to acheive this.
put an entry in the override for abc.com and point it at your internal dns servers where you have a zone file for abc.com which has a internal a record for www. (for example)
then when a user goes through the ironport for www.abc.com the WSA will see there is a DNS override and rather than quering the internet root servers it will query your internal servers which will return an internal address and route the user to your internal site.
If you just want to override a single host rather than the whole domain,
For example you want to redirect all www.google.com to an internal but keep mail.google.com being resolved out.. in the domain section you can put the host name as well, (this way the internal server will only be queried if the user types www. and the external queried if they use mail.)
Its Not just to point to another dns for certain domains. That would require zone records for the entire domain. I only need to redirect some fqdn urls to other adresses
The BC DNSproxy listens on udp 53 like a real dns.
And if at has a host record for www.att.com whit address 18.104.22.168 it will return this instead of our real public address. We ten route 22.214.171.124 to a pix or asa that makes a reverse nat to the real address or a vpn tunnel.
So we can have exeptions for the "general security rule, no routing to internet registred adresses" at this customer.
Querys can be send from internal devices that do not pass the proxy.
The need comes from a migration from a eol/eos SGS5660 setup.
The SGS DNSd deamon could do the same thing as the BC dns proxy
The WSA is not a DNS server and it doesn't proxy requests via port 53.
I wonder though, if you are only dealing with a few fqdn's, if you could define them in a custom category named "category_redirect", for example. You could then create an access policy and define membership with an advanced option of "URL Categories: category_redirect". You would then set the Custom URL Filtering for the new access policy to Redirect and specify the desired URL; in this case, I believe you could use an ip address for the URL, though I don't know if you would be limited to http traffic.
In any case, you would still have to deal separately with any traffic that you are trying to redirect that is not normally proxied.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...