SSLVPN Multiple Default Domain's

[mdfetting]

This question pertains to SSL VPN running on an ASA5520 using 8.2. I need to be able to support two "default domain" values in my SSL VPN's Internal Group Policy. The "default domain" field in the Servers section of Internal Group Policy only seems to support one domain name entry. I tried to create a second connection profile and group policy with matching values, except that this new policy contains the second domain name. This did not seem to make any difference. What is the right approach to supporting multiple default domains for SSL VPN connections?

[rahgovin · Accepted solution]

Unfortunately, we can only have one default-domain value per group-policy. You can use split-dns to put in multiple domains that can be resolved via the internal dns server( per group-policy), but you would need to put in the entire domain-name when you query in case you want to resolve to right one. Only for the default-domain you can use the name alone to resolve.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml#splitdns

[mdfetting]

Thanks, Rahul! Editing the group policy's Split Tunneling DNS Names did solve this issue for me. I was able put them in separated by spaces.

[rahgovin]

Great Mark this thread as answered if your issue is resolved.

Thanks.