I have an ASA 5515 as my internet firewall. It is not allowing me to do NS Lookups from any internal DNS Servers, or clients. If I set my nslookup server to 126.96.36.199 (google DNS), I can resolve public DNS names. If I am on the internal network, breaks.
I have the following in my ASA:
policy-map type inspect dns preset_dns_map parameters message-length maximum client auto message-length maximum 8192 policy-map global_policy class inspection_default inspect ftp inspect h323 h225 inspect h323 ras inspect ip-options inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp inspect pptp inspect ipsec-pass-thru inspect icmp inspect dns preset_dns_map
Any ideas as to why its not working?