Im having an issue with Check Point Capsule VPN (Windows Store) Client and resolving external dns-names.
We have a customer that uses Check Point Capsule VPN Client and have defined Office Mode DNS-servers, internal DNS-suffix etc. Customer also uses "Route all traffic" via the VPN-gateway (required).
Solution has been working fine for the users that have tested this in a PoC but now the have went into production several uses complain about multiple external internet-sites that doesnt work.
Checking known limitations, capsule VPN Admin guide etc we find no settings that should impact this, but in sk112164 we see that:
"Windows 8.1 Plugin and Capsule VPN app for Windows 10 can only resolve host names whose domain suffix is configured in the Office Mode Optional Param"
So the issue we are having is that Capsule VPN ignores the Office Mode DNS-servers for lookups to external hosts and uses each clients-local DNS-server, where some of these DNS-servers rejects DNS-queries from the Firewall they connect via..
This seems like a "logical flaw" in the use of Capsule VPN and "Route All" and causes us a major headache...
A service request has been created with TAC waiting for input.
Anyone have any experience with / any input on if we can solve this somehow without changing local DNS-servers on a few thousand users that already uses Capsule VPN for multiple Check Point gateways or switch to another client ?