VPN Anyconnect DNS issue

[moises.nisenbaum2]

Connecting to CML2 SandBox using Cisco AnyConnect changes my Windows DNS so I cannot navigate in Internet in the same time I use the CML2 Sandbox.

Researching a little bit abou this issue I found out that it probably is a server side problem.

Would you please help?

Thank you!

[MHM Cisco World]

You use asa' if yes config external dns server. And check 

[moises.nisenbaum2]

Unfortunately I do not use ASA at home. It is my ISP router.

[MHM Cisco World]

Even so ISP router' add external DNS to anyconnect profile.

[Flavio Miranda]

Hi @moises.nisenbaum2 

Did you try to add a second dns on your Windows machine network adapter?

[moises.nisenbaum2]

Yes. It does not work.

[Flavio Miranda]

Does the DNS is the only thing they are chaning on your machine or they are adding a default route also?

If they are, you may need to add another default route sending to you internet gateway. The behavior you describes sounds like they are also changing your routing also.

[moises.nisenbaum2]

Ping to 8.8.8.8 works. So I didnt check for wrong routes.
nslookup changing the DNS server works.

[moises.nisenbaum2]

It was working fine for years. Some day this issue started to happen... I didnt change any config...

[MHM Cisco World]

Dont use edge but use google browser.

[bigevilbeard]

Check this thread here -- https://community.cisco.com/t5/devnet-sandbox/internet-on-my-laptop-stops-when-on-vpn/m-p/4055662#M4568

[Johnandrew]

Split tunneling is a feature of Cisco AnyConnect that allows you to specify which traffic should be routed through the VPN tunnel and which traffic should be routed through your regular internet connection. If you disable split tunneling, all of your traffic will be routed through the VPN tunnel, including DNS traffic. This will ensure that your DNS queries are always resolved by the DNS servers of the CML2 Sandbox.