Are F5 devices capable of intercepting and rewriting DNS registration packets?

In summary – we have a number of application servers which are sat behind a F5 device which is performing NAT. On the other side of the F5 is an AD domain controller which is providing DNS for the application servers. Now… the application servers have physical addresses in the 172 range, but everyone access them through NAT using a 10 address. Unfortunately, the application servers keep updating their DNS records with their physical IP address (172) overwriting the NAT (10) address that everyone needs to use to access them. I can see from the DNS audit records on AD that the DNS update requests are coming from the 10 address, but contain the 172 address. This implies that the source of the DNS registration packet is being updated, but the contents are not. How should this work? Surely I don’t have to create (and continuously enforce) static IP addresses for all these servers… isn’t the F5 device capable of rewriting the DNS packet?