AnyConnect 4.x - Resolve hostname to public address while connected via VPN

[hypnotoad]

Hey all,

I have a hostname that needs to be available both inside and outside our network on the same name.  If a user is outside our network, I need them to resolve the name to a public address even when connected via AnyConnect client.  Is there a way to intercept the DNS query and return the public address?  I'm open to ideas.

Thanks,

Patrick

[Mohammad Alhyari]

The only thing i have in my mind is to utilize the DNS inspection on the ASA and drop the query that has that name in the questions section.

Moh,

[Mohammad Alhyari]

You can drop the query when coming from the client pool. Look at this example

https://www.tunnelsup.com/using-just-a-cisco-asa-to-block-specific-websites/