You need to configure DNS settings on the firewall.
Configure the hostname, domain name, and DNS servers:
set hostname FIREWALL-AFIREWALL-A->
set domain oreilly.comFIREWALL-A->
set dns host dns1 22.214.171.124FIREWALL-A->
set dns host dns2 126.96.36.199
During initial firewall installation, it is recommended that you change the firewall's hostname to something meaningful, typically according to your organization's naming convention. By default, Juniper firewalls ship with a default name that is the same as the name of the product. In this example, an SSG20 is being configured with a new hostname,
FIREWALL-A. Note that once the hostname is set, the prompt changes to reflect the hostname. In an NSRP environment, the hostname is not a synchronized portion of the configuration, so this step must be performed on each member of an NSRP cluster. Next, the domain name of the local device is set.
Finally, the primary and secondary DNS servers' IPs are configured. In cases where the DNS servers are on the other end of a tunnel, you can specify the source interface for DNS requests using the
src-interface keyword at the end of the
set dns host command. This allows the head-end VPN device to route DNS replies through the tunnel. ScreenOS supports up to three DNS servers that can be used for name resolution. You can use this resolution for different purposes. One of the primary purposes for name resolution is for troubleshooting: ...