Cisco AnyConnect ignores hosts file and dns server.

[jonah1559]

Greetings,

I am currently facing a strange issue with AnyConnect. We provide different profiles for our employees, one of which is a full tunnel where everything is tunneled through the VPN. Now if I want to ping my own machine using the FQDN it tries to ping the ip that the machine has in my local network (e.g: 192.168.1.10) not the IP inside the VPN (e.g 10.1.1.10). Since the used profile is a full tunnel, this request fails.

Now when I manually modify my hosts file to point to my VPN IP, this does not have any effect at all. The ping still goes to 192.168.1.10, ignoring the Hosts file of my Windows and the DNS Server inside the VPN, which also has my hostname pointed to an IP.

Does anyone have any ideas, where this problem may be coming from? Any help would be greatly appreciated.

[balaji.bandi]

Personally think that Full tunnel not going to work, but if you have spilt tunnel configured correct should work.

Its also depends on how your environment -  like GPO or different method you using.

check how DNS works on VPN

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/116016-technote-AnyConnect-00.html