topic Re: PIX DNS Issues in Network Security https://community.cisco.com/t5/network-security/pix-dns-issues/m-p/560107#M501718 <HTML><HEAD></HEAD><BODY><P>Dns on the pix only fixes up the A records and not a zone transfer. Zone transfers tend to</P><P>go over TCP. The PIX only watches UDP packets for DNS traffic.</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapte" target="_blank">www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapte</A></P><P>r09186a008017278b.html#wp1063720</P></BODY></HTML> Mon, 15 May 2006 13:01:35 GMT beth-martin 2006-05-15T13:01:35Z PIX DNS Issues https://community.cisco.com/t5/network-security/pix-dns-issues/m-p/560106#M501717 <P>I've got the following situation - PIX OS 7.1(1), Remote Access VPN with split tunneling and Cisco VPN client on WinXP. When I config the device to send to the remote client a DNS server in the private network (which I can't reach for a couple of reasons anyway) the Win PC keeps its DNS servers from the local network which are reachable (successful ping) but do not resolve queries. If I config the device not to send a DNS server the PC works correctly with its DNS servers. Anyone faced such a problem?</P> Fri, 21 Feb 2020 08:52:58 GMT https://community.cisco.com/t5/network-security/pix-dns-issues/m-p/560106#M501717 thegrave2000 2020-02-21T08:52:58Z Re: PIX DNS Issues https://community.cisco.com/t5/network-security/pix-dns-issues/m-p/560107#M501718 <HTML><HEAD></HEAD><BODY><P>Dns on the pix only fixes up the A records and not a zone transfer. Zone transfers tend to</P><P>go over TCP. The PIX only watches UDP packets for DNS traffic.</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapte" target="_blank">www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapte</A></P><P>r09186a008017278b.html#wp1063720</P></BODY></HTML> Mon, 15 May 2006 13:01:35 GMT https://community.cisco.com/t5/network-security/pix-dns-issues/m-p/560107#M501718 beth-martin 2006-05-15T13:01:35Z