DNS in global protect vpn

[ghostrider]

Hello Experts

In global protect configuration, I provided the DNS IP. After VPN connect, I have two DNS, Physical card DNS and global protect vpn provided DNS. My question is that what DNS would be used for DNS queries for internet and for traffic through global protect vpn?

Regards,

GR

[pulukas]

When you configure the DNS settings for global protect these should take precedence over the local DNS when you are connected.  All queries would go to these servers and you need to confirm they are reachable from the global protect tunnel connection.

However, this behavior can be overriden by the local OS of the client.  And there are known issues with some OS like Apple IOS ignoring requests to non-standard domains like .local.

[ghostrider]

Hi @pulukas

Thanks. So even in split tunneling, all DNS request will go to the DNS provided by global protect? Also how this behavior can be overriden by the local OS of the client?

[pulukas · Accepted solution]

Yes even with split tunneling.  naturally you need to be sure that your DNS server addresses are on the split tunnel so they can be reached while connected to the vpn.

The IOS example kb is here ignoring the DNS requests on the VPN.  

https://live.paloaltonetworks.com/t5/Management-Articles/GlobalProtect-Gateway-DNS-Settings-Ignored-...

[ghostrider]

Thank you