I have a anyconnect remote vpn profile where I am having the problem with intermittent issue with external dns. I can not open any external weblink and cant ping it with name but accessing them with ip is fine.
I opened a case with cisco but they are unable to give a proper answer or workaround for the issue I am seeing. I am using split tunnel and split dns in my
Can someone please help and tell me if there is something I am missing out?
Here is vpn config from firewall:
vpnfw1a# sh run all group-po abc_vpnPolicy group-policy abc_vpnPolicy internal group-policy abc_vpnPolicy attributes banner value WARNING: Unauthorized access to this system is forbidden and banner value will be prosecuted by law. By accessing this system banner value you agree that your actions are monitored and recorded. dns-server value 10.1.1.11 vpn-simultaneous-logins 2 vpn-idle-timeout 1440 vpn-session-timeout none vpn-filter value abc_vpnVPN vpn-tunnel-protocol ikev1 ssl-client group-lock value abc_vpn ipsec-udp enable split-tunnel-policy tunnelspecified split-tunnel-network-list value abc_vpnNetworks default-domain none split-dns value abc.partners jira.abc.com confluence.abc.com user-authentication enable webvpn anyconnect keep-installer installed anyconnect ssl rekey method none anyconnect dpd-interval client 10 anyconnect dpd-interval gateway 30 anyconnect modules value dart anyconnect profiles value abc_vpn-profile type user anyconnect ask enable
Tunnel group all config:
vpnfw1a# sh run tunnel-group abc tunnel-group abc type remote-access tunnel-group abc general-attributes address-pool abcVpnPool authentication-server-group RADIUS default-group-policy abcPolicy tunnel-group abc webvpn-attributes authentication aaa certificate group-alias abc enable