Hello everyone.
We are in the middle of an implementation for Cisco jabber soft client on remote access VPN clients and there is certain firewall changes that need to be made to meet the requirements they have and we are unable to see if this is currently possible to be done or not.
What we currently have is a split tunnel with specified destination (ACL) to traverse over the tunnel, split-dns is none. Now the requirements we received as follows:
1- These two domains are currently configured on the company DNS servers to resolve to IP A and B
2- DNS queries from remote VPN client (Cisco Jabber) to the two domains need to be using the physical interface DNS servers, not the DNS servers of the VPN adapter and should resolve to X and Y
We were able to achieve this objective but we had faced so many issues, and this is how we achieved it
split-dns value [Listing all the domains that we need to be able to query over the tunnel, pretty huge list]
split-tunnel-all-dns disable
We still have faced issues where some domains needed to be added so we removed the two lines and stayed on previous configuration. Is there any way to achieve the same behavior differently ? In other words, to achieve the same objective but in opposite direction where I can only specify the domains the need to be excluded from being queried through the tunnel (VPN adapter DNS servers).
Your help will be highly appreciated as this issue has been going for months now.
