Can this use case below be supported by Umbrella VA(s) - My gut feeling is not really as stated, but other alternatives might provide similar functionality, assuming the DMZ DNS servers were a separate sub-domain, etc..
From Customer:
We are considering to set up a pair of VAs at each of our 2 locations. Our question is can a VA, based on source IP, split brains to our domains’ DNS servers or DMZ’s DNS servers?
For Example:
If source IP is located in our DMZ:
- To public domains, VA will forward to OpenDNS
- To internal devices or other DMZ devices, VA will forward to DNS servers we set up just for DMZ devices
If source IP is not located in DMZ (i.e. non-DMZ):
- To public domains, VA will forward to OpenDNS
- To internal domain devices, VA will forward to our internal enterprise DNS servers which mange our internal domains.
-
