Split DNS and Umbrella

[likvid]

This combination doesn't seem to work for Umbrella, for Zscaler it works perfectly.

We have an internal DNS server with the same FQDN and different IP depending if you are connected with the Secure Client VPN or without.

Umbrella can't handle this situation as it only returns the external IP of the FQDN.

How do we solve this? go back to Zscaler?

[Ken Stieers]

Add your external domain to the list of "internal domains" under Deployment/Domain Management.

You could put in external domains, but I reserve that for the weird stuff that just won't work with Umbrella proxy(we use SIG)

[ccieexpert]

Put in internal domains.. external domains will bypass only the web proxy but DNS will still go through the Umbrella DNS and will give the public ip..