Specific Site is reporting DNS failure alert

If this is a full MIST stack implementation, it is important to identify which device the DNS alert is generated. MIST AP's generate DNS failure alert and DNS failures are narrowed down to AP's. Validate Ping and traceroute the DNS server IP from the device. The firmware for the site is up to date.

Debugged the issue with AP and identified that the DNS failure is specific to domains.

Packet capture on the SSR device, there is no drops for DNS traffic on SSR.

With the above the issue is with DNS server and not with Juniper devices.