Last Modified: Sep 22, 2026
Affected Product(s):
APM-Clients TMOS
Known Affected Versions:
7.2.6.1, 7.2.6.2, 7.2.7, 7.2.7.1, 7.2.7.2
Opened: Dec 01, 2025 Severity: 4-Minor
In split tunnel VPN connection, DNS queries are sent to Tunnel (NA DNS server) when the a FQDN is added in DNS exclude address space and local DNS IP is invalid or not reachable. This happens when DNS exclude address space is configured but DNS include address space is not configured which is invalid configuration for DNS split tunnelling.
Local DNS traffic is resolved through Network Access dns server
1. Split tunnel VPN configuration 2. DNS exclude address space configuration but empty DNS include address space configuration 3. Local DNS server becomes invalid post VPN establishment
For DNS split tunnelling, configure both DNS include and exclude address space in Network access configuration
None