topic Re: DNS in global protect vpn in General Topics

DNS in global protect vpn

ghostrider — Sat, 29 Oct 2016 14:48:13 GMT

Hello Experts

In global protect configuration, I provided the DNS IP. After VPN connect, I have two DNS, Physical card DNS and global protect vpn provided DNS. My question is that what DNS would be used for DNS queries for internet and for traffic through global protect vpn?

Regards,

Re: DNS in global protect vpn

pulukas — Sun, 30 Oct 2016 12:36:16 GMT

When you configure the DNS settings for global protect these should take precedence over the local DNS when you are connected. All queries would go to these servers and you need to confirm they are reachable from the global protect tunnel connection.

However, this behavior can be overriden by the local OS of the client. And there are known issues with some OS like Apple IOS ignoring requests to non-standard domains like .local.

Re: DNS in global protect vpn

ghostrider — Sun, 06 Nov 2016 20:49:39 GMT

Hi @pulukas

Thanks. So even in split tunneling, all DNS request will go to the DNS provided by global protect? Also how this behavior can be overriden by the local OS of the client?

Re: DNS in global protect vpn

pulukas — Mon, 07 Nov 2016 23:41:17 GMT

Yes even with split tunneling. naturally you need to be sure that your DNS server addresses are on the split tunnel so they can be reached while connected to the vpn.

The IOS example kb is here ignoring the DNS requests on the VPN.

https://live.paloaltonetworks.com/t5/Management-Articles/GlobalProtect-Gateway-DNS-Settings-Ignored-on-IOS-Devices/ta-p/56943

Re: DNS in global protect vpn

ghostrider — Tue, 08 Nov 2016 06:39:17 GMT

Thank you