topic DNS on ASA 5525 in Network Security

DNS on ASA 5525

Bekzod Fakhriddinov — Tue, 12 Mar 2019 06:02:20 GMT

Hi guys. I have new dmz zone for wireless guest access . Guest's can connect to our vpn by ip but can not by name . On our DNS (windows server) server we have name-to-ip for access from external and from internal access but I am not sure we can add 3rd type from guest_dmz network .

Is it possible to setup kind of local host table name-to-ip entry on ASA ?

Not on the ASA.An ASA can't

Marvin Rhoads — Tue, 02 Jun 2015 18:25:41 GMT

Not on the ASA.

An ASA can't be a DNS server, even a stripped down one.

Your wireless guests should be using a DNS server per what's handed out from their DHCP server.

What DNS server is specified in the scope and how does it resolve the VPN portal FQDN?

we have windows based dns

Bekzod Fakhriddinov — Tue, 02 Jun 2015 19:03:33 GMT

we have windows based dns server which is doing this feature for remote external users using vpn from internet and internal users connecting to vpn from internal interface. windows admin is not sure how he can add 3rd zone / subnet dns translation on the same DNS server ...