Requirements

This feature is only supported by the DNS Resolver. If the firewall is currently using the DNS Forwarder, convert to the DNS Resolver before starting this procedure.

Pick a DNS over TLS upstream provider, such as a private upstream DNS server or a public server like Cloudflare, Quad9, or Google public DNS. Note the addresses of the servers and their associated hostnames.