<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic DNS Query in SASE and Remote Access</title>
    <link>https://community.checkpoint.com/t5/SASE-and-Remote-Access/DNS-Query/m-p/124526#M8273</link>
    <description>&lt;P&gt;I wonder if anyone can help with this query?&amp;nbsp; My customer uses Capsule VPN on their iPads.&amp;nbsp; He's trying to browse to &lt;A href="https://server.domain.com," target="_blank"&gt;https://website.domain.com,&lt;/A&gt;&amp;nbsp;but instead of resolving the public IP, it's coming back with a machine on his LAN - host.LOCAL.domain.com.&lt;/P&gt;&lt;P&gt;Office Mode DNS suffix is set to LOCAL.domain.com.&amp;nbsp; So I thought anything for domain.com would not match the Office Mode suffix and therefore just use the device/ISP DNS and get the public IP?&amp;nbsp; It seems all DNS queries are being sent to the Office Mode DNS servers instead, and therefore resolving incorrectly for domain.com.&lt;/P&gt;&lt;P&gt;There's next to no useful documentation on Capsule that I can find, but it seems Capsule doesn't do any split DNS stuff?&amp;nbsp; Is there a way to make stop the client from using Office Mode DNS servers for public FQDN's?&lt;/P&gt;</description>
    <pubDate>Wed, 21 Jul 2021 10:31:28 GMT</pubDate>
    <dc:creator>biskit</dc:creator>
    <dc:date>2021-07-21T10:31:28Z</dc:date>
    <item>
      <title>DNS Query</title>
      <link>https://community.checkpoint.com/t5/SASE-and-Remote-Access/DNS-Query/m-p/124526#M8273</link>
      <description>&lt;P&gt;I wonder if anyone can help with this query?&amp;nbsp; My customer uses Capsule VPN on their iPads.&amp;nbsp; He's trying to browse to &lt;A href="https://server.domain.com," target="_blank"&gt;https://website.domain.com,&lt;/A&gt;&amp;nbsp;but instead of resolving the public IP, it's coming back with a machine on his LAN - host.LOCAL.domain.com.&lt;/P&gt;&lt;P&gt;Office Mode DNS suffix is set to LOCAL.domain.com.&amp;nbsp; So I thought anything for domain.com would not match the Office Mode suffix and therefore just use the device/ISP DNS and get the public IP?&amp;nbsp; It seems all DNS queries are being sent to the Office Mode DNS servers instead, and therefore resolving incorrectly for domain.com.&lt;/P&gt;&lt;P&gt;There's next to no useful documentation on Capsule that I can find, but it seems Capsule doesn't do any split DNS stuff?&amp;nbsp; Is there a way to make stop the client from using Office Mode DNS servers for public FQDN's?&lt;/P&gt;</description>
      <pubDate>Wed, 21 Jul 2021 10:31:28 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SASE-and-Remote-Access/DNS-Query/m-p/124526#M8273</guid>
      <dc:creator>biskit</dc:creator>
      <dc:date>2021-07-21T10:31:28Z</dc:date>
    </item>
    <item>
      <title>Re: DNS Query</title>
      <link>https://community.checkpoint.com/t5/SASE-and-Remote-Access/DNS-Query/m-p/124600#M8274</link>
      <description>&lt;P&gt;Does that include all DNS requests or just ones involving example.com?&lt;BR /&gt;We are limited by what iOS allows in this situation.&lt;BR /&gt;Make sure this isn’t configured:&amp;nbsp;&lt;A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;amp;solutionid=sk137676&amp;amp;partition=Advanced&amp;amp;product=Mobile" target="_blank"&gt;https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;amp;solutionid=sk137676&amp;amp;partition=Advanced&amp;amp;product=Mobile&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 21 Jul 2021 20:10:27 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SASE-and-Remote-Access/DNS-Query/m-p/124600#M8274</guid>
      <dc:creator>PhoneBoy</dc:creator>
      <dc:date>2021-07-21T20:10:27Z</dc:date>
    </item>
  </channel>
</rss>

