it would be nice if one could specify the internal DNS server in the sbox securemote/client configuration. and then when the remote user connects, it automatically puts this information into the userc.c file on the client.
it is a pain in the backside to edit the userc.c file and insert the split dns (which specifies the domain name and internal dns server) information at the "dnsinfo" section.
it is even more of a pain when you are trying to tell a remote user how to do it over the phone!
with Check Point NGX firewalls, this is done automatically. why not with the sbox?

by "split dns" i mean:
if a user has securemote installed on his laptop and is connecting via a foreign network, such as a wireless network or 3g mobile broadband card, and his laptop is on a domain, such as sofaware.local, using splitdns in the userc.c file on the client, it is possible to specify the domain and the DNS server for that domain.
the user has the dns servers assigned to him by the network he is connecting too. but when he trys to access a server on the domain, such as emailsvr.sofaware.local, it will send of the nslookup to the splitdns server listed in the dnsinfo section of the userc.c file on his laptop.
hope this makes sense!
Regards
Ed McGuire

Ed if you use SC you can publish the internal DNS servers to the client. Thar has worked for me. Even when I had a Checkpoint NGX R60 cluster the split DNS didn't work so well though.

quote:

it automatically puts this information into the userc.c file on the client.

Hey Ed - have you tried the Secure Client packager for this? You could build an SC install package for each customer and it will use the Users.c file. It worked when I tried it ages ago.

Or, you can try using Office mode - which is how I do it here and publish my internal DNS servers.