Split tunnel VPN Skype for Business - rewriting DNS

Hi MSE8000rob,

you may want to implement a Split-DNS setup, so that VPN clients will get a slightly different DNS resulution.

For Windows clients, you can make use of F5s

Static Hosts

For everything else you can either:

1. Deploy a DNS-Forwarder/Cache for your VPN clients (e.g. another Windows DNS) forwarding DNS-Request to your internal DNS Servers, while providing a additonal DNS zone for

   your-sbf-hostname.domain.tld

   including an

   ""

   (empty) or

   *

   (wildcard) A-Record reflecting the Edge-SfB IP adress.
2. Use a DNS-Service enabled (requires DNS Server licenses) Virtual Server infront of your internal DNS Servers and point the VPN clients to this Virtual IP. Then apply an iRule to this VS to overwrite DNS request/responses for

   your-sbf-hostname.domain.tld

   to match the IP of your Edge-SfB server.

Cheers, Kai