Hope this helps someone.
I went through a newly developed issue regarding Site to site tunnels.
I had to make a new site to site tunnel between two sites.
I routed all DNS through the tunnel to a DNS server on the other side until I could create a DNS server in the new site.
I found I could not resolve anything on my domain, but the internet worked.
I installed Wireshark on the remote site computer and the DNS server in the main site and monitored DNS traffic.
DNS on the remote computer said it was transmitting to the remote DNS server even had Wireshark replies that said they were from the remote DNS server. The remote DNS server saw NO DNS traffic coming in.
long story short, I did not have my local domains excluded from my Umbrella DNS policy in FMC.
go to Policies / DNS and edit the Default Umbrella DNS Policy
I added my local domains in the Bypass Domains and DNS traffic properly flows to my local DNS Server.
