topic Re: MobileAccess : DNS suffix search list in SASE and Remote Access

MobileAccess : DNS suffix search list

isr42 — Fri, 27 Mar 2020 13:35:56 GMT

Hi,

We have problem to implement au DNS suffix search list in SNX connexion with Mobile Access.

1) We have configured DNS suffixes in our cluster, Mobile Access - Name Resolution

Our first problem is the format. By consulting the help of this page (by clicking ?), there is this line :

"DNS suffixes can be one or more comma separated items, e.g. example.com, example.org".

But in this SK (https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116145&partition=Advanced&product=Endpoint ), the seperator is not a comma but a semicolon !

What is the right syntax ? comma ou semicolon ?

2) We have tried with the 2 parameters but, running "ipconfig /all", instead of have a DNS suffix per line, we have a first line with our "default" domain, and a second one with example1.com;example2.com;example3.com.

So the DNS resolution only work with the default domain...

Anybody can help us ?

Best regards.

Re: MobileAccess : DNS suffix search list

PhoneBoy — Fri, 27 Mar 2020 22:54:11 GMT

My money is on either a comma or a space as delimiters.

Re: MobileAccess : DNS suffix search list

Juan_Concepcion — Thu, 02 Apr 2020 00:14:35 GMT

I have a customer with exact same issue. 4 dns suffixes defined and only 1st one works across multiple clients (capsule connect and endpoint connect) same behavior.

Re: MobileAccess : DNS suffix search list

Thomas_Eichelbu — Tue, 28 Apr 2020 18:41:50 GMT

Hello together!

iam currently struggeling with exact the same issue ...
i seperated both DNS suffixes in the Office Mode settings via a "comma".

And it works only for my only Windows 8.1 client, not on my Windows 10 Build 1809.
i use the E82.50 End Point Mobile Client

In Windows 8.1 i see multiple DNS suffixes written on below each other. As it should be.
But not on Windows 10.

so i think its more an Microsoft Window Issue ...

also i played with "ipassignment.conf" and got the same results for this config line:

Gateway Type IP Address User Name
============= ===== ======================================== =========================================
#TEST
10.8.253.252 net 10.255.1.0/24 suffix=(suffix1.com,suffix2.com) dns=(10.4.8.105,10.4.5.32) GRP_USER_XXXXXXX

in runs on SNX and Check Point Mobile on Windows 8.1 but not the current Windows 10 1809.

i remember i got it to work with older Windows 10 versions, but something was changed...

maybe someone knows how to tweak it on the Windows side?

best regards
Thomas.

Re: MobileAccess : DNS suffix search list

Thomas_Eichelbu — Thu, 23 Feb 2023 13:45:48 GMT

Hello,

and again iam struggeling with the same issue ...
this time on Windows 10 20H2 .
i knew this was working before, but now it doesnt ...

i opened a TAC case ... lets see what they find.