Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a Cisco ASA providing a VPN gateway for users. Currently when users VPN'n from outside the network they can access file servers from their IP addresses but the shares do not response via share name.

I have checked the DNS settings on the ASA and it is distributing the correct internal DNS server addresses to the VPN client.

I am beginning to think it is something to do with the internal DNS servers not accepting queries from different subnets? Does anyone know this to be a problem? DNS servers are both WinServer2008R2.


share|improve this question
up vote 0 down vote accepted

You should make sure that 53\udp and 53\tcp to your DNS servers are allowed to the VPN clients by the ASA VPN policy. You should also make sure that the DHCP server for your VPN subnet(s) are giving these DNS servers to the clients.

share|improve this answer
Check by doing an nslookup of an internal FQDN from an affected client. If you don't get a response, it's most likely a firewall issue. – downthepub Oct 1 '12 at 12:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.