You could proxy DNS requests so firewall can show dns name

You could proxy DNS requests so firewall can show dns name