Dns Suffix which ASA distributes

[nyanko-nt]

We use ASA VPN (Cisco VPN Client and Anyconnect)

Note PC Physical interface
=====================================================
Domain Primary Dns Suffix：    xxxx.hogehoge.com
Physucal Interface Suffix List：         xxxx.hogehoge.com
                        hogehoge.com
                        hogehoge.co.jp
=====================================================

Dns Suffix which ASA distributes
=====================================================
hogehoge.co.jp
=====================================================

Connecting VPN with Cisco VPN Client(IPSec)
=====================================================
        Primary Dns Suffix  . . . . . . . : xxxx.hogehoge.com
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : hogehoge.co.jp
                                            xxxx.hogehoge.com
                                            hogehoge.com
                                            hogehoge.co.jp

=====================================================

Connecting VPN with AnyConnect(SSL VPN)
Can't see 'hogehoge.co.jp'(from ASA ?)
=====================================================
        Primary Dns Suffix  . . . . . . . : xxxx.hogehoge.com
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : hogehoge.co.jp
                                            xxxx.hogehoge.com
                                            hogehoge.com
=====================================================

When the same DNS Suffix is distributed, does the overlapping DNS Suffix disappear?
Is this the specification of Any Connect?

[jonrojas]

Hi,

AnyConnect or the VPN Client will just add the suffixes you specify on the ASA, so if you add one that is already on the computer you will see a duplicate, but it shouldn't affect functionality.

HTH

Jonnathan

[nyanko-nt]

We checked another Domain Suffix.

Windows IP Configuration

=====================================================
        Primary Dns Suffix  . . . . . . . : hogehoge.com
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : hogehoge1.com
                                            hogehoge2.com
                                            hogehoge3.com
                                            hogehoge4.com
=====================================================

Dns Suffix which ASA distributes
=====================================================
hogehoge3.com
=====================================================

Connecting VPN with AnyConnect(IPSec VPN)
=====================================================
        Primary Dns Suffix  . . . . . . . : hogehoge.com
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : hogehoge3.com
                                            hogehoge1.com
                                            hogehoge2.com
                                            hogehoge3.com
                                            hogehoge4.com
=====================================================

Connecting VPN with AnyConnect(SSL VPN)
Can't see 'hogehoge4.com'(Not Overlap DNS Suffix)
=====================================================
        Primary Dns Suffix  . . . . . . . : hogehoge.com
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : hogehoge3.com
                                            hogehoge1.com
                                            hogehoge2.com
                                            hogehoge3.com
=====================================================

Although the same DNS Suffix was made to distribute this time also, DNS Suffix which is not overlapped disappeared.

Why is this?