DNS behind a PIX 501...

[jocadmin]

I have a PIX 515 at my home office and a PIX 501 at a remote site. Once the workstation was installed at the site an IP address, subnet mask and a gateway(internal 501 interface) were added.

What should the DNS be set for? The 501, the ISP's DNS servers or my server on the internal network that the workstation is VPNing into?

Thank you.

 

[boymarty24]

Depends,

Your workstation behind the 501, are they users in a AD?
I would personaly let the clients behind the pix501 have the server dns. If you are running outlook2003 ( not http rpc ) you most likely need server dns.

Marty

 

[NetworkGhost]

I would set your internal DNS server at your home office and a secondary of the ISPs. (In case the tunnel goes down.)

 

[boymarty24]

Good point there Ghost about the second dns!

 

[jocadmin]

Yes, very good point. I think I'll put the remote w/s DNS to the ISP's.