topic DNS Resolution in General Topics

DNS Resolution

Joshan_Lakhani — Tue, 23 Jun 2020 12:01:58 GMT

Is there any way to segregate the traffic of DNS server through global protect.

example:- I have allowed some traffic through the split tunnel and i configured internal DNS server.
scenerio:-
I connect through the global protect when i do nslookup from my system my all query will resolve by internal DNS server, However i want to segregate traffic only split tunnel traffic should be resolved by internal DNS server. Rest of the traffic should be resolved by external(8.8.8.8).Please advice

Re: DNS Resolution

MP18 — Tue, 23 Jun 2020 13:30:40 GMT

Under Gateway

agent , client settings then click on split tunnel

You will see Tab on left hand side Access routes

below that you see include and exclude

What ever traffic you want to exclude will use your ISP DNS server rest of traffic will use your Company DNS server.

Re: DNS Resolution

Joshan_Lakhani — Tue, 23 Jun 2020 19:59:42 GMT

thank for your reply

iam using the split tunnel to allow such traffic which passing through global protect .Rest of traffic will automatically exclude by paloalto. if iam not add any thing in exclude column or it's mandatory to add such network(Public network) to exclude and don't resolve the internal dns. please suggest

Re: DNS Resolution

MP18 — Tue, 23 Jun 2020 20:07:33 GMT

Yes for split tunnel to work you need to exclude network what you want .

Re: DNS Resolution

Joshan_Lakhani — Tue, 23 Jun 2020 20:17:47 GMT

if i want to exclude the other traffic so it's will resolve my private DNS or public DNS. Because when i try to do nslookup it will still show my private dns and also seen in wireshark it's resolve my private dns for every query.

Re: DNS Resolution

MP18 — Tue, 23 Jun 2020 21:29:30 GMT

Yes Traffic that is excluded will use your Private or Home ISP DNS or Google DNS which ever you have.

Re: DNS Resolution

Joshan_Lakhani — Wed, 24 Jun 2020 06:18:15 GMT

i have excluded the public network but still my private DNS is resolved.

Re: DNS Resolution

MP18 — Wed, 24 Jun 2020 06:24:23 GMT

When you say I exclude the public network which subnet's you put in exclude network?

Then when you access those subnet's it will not go via the Global protect.

It will use user Home network DNS to resolve the websites.