Global protect DNS name resolution.

[ParvezAhmad]

Hello Experts,

Through global protect, users are getting IP address from the pool and take network setting as defined including primary DNS and Secondary DNS.

but the users want to access servers via name(s) not IP addess(es). Since it was working before with cisco remote vpn.

Please let me know is there any setting in global protect gateway to make it functional?

Thank you.

Regards,

Parvez

[_slv_]

Hello Parvez

In my opinion it isn't GP issue. Please use in GP configuration your local DNS servers, servers that are able to resolve name of servers that are want to use by your users.

Maybe you miss security policy that allow DNS traffic from zone VPN to zone where are Your DNS sererwers?

Regards

Slawek

[ParvezAhmad]

Hello Slawek,

GP tunnel interface is the part of inside zone and DNS servers resides in the same zone.

Regards,

Parvez

[_slv_]

Could You ping by IP address this servers?

What about nslookup - is it possible to get response about google.com?

[Hithead]

Firewall Policy? is DNS allowed from the tunnel zone to the destination zone ?