Hello community! Firstly, I would like to say, that's my question is apply either for Windows 8 and Windows 7 and because there no a unified section for all windows (from xp to 10), I'm posting it here. Please move this thread if there is another section, which more fit for this question.

I have really difficult situation. Clients of my company uses Cisco AnyConnect for connecting to Internet. When a user starts AnyConnect and provide it's credentials, connection is occurs and AnyConnect registering its IP address in our DNS. And thus this client become not available on intranet (general failure is occurred at using net tools such as ping). My question is - how to change behavior or order of IP, so only internal IP (in my case it's 10.*) have been using at resolving clients? Requests to clients will be emanate from few PCs, so I'm accepting offers regard changes for server (from which requests will issues).

Hi,

Cisco AnyConnect is VPN client software.

It should be properly configured for split tunneling and DNS registration.However, configuring Cisco products is out of scope for this forum and I would recommend you to look for help on Cisco forums.

In the meantime, you may try to assign fixed IP adresses to these few PC's. You can achieve this by manual IP configuration, or by using DHCP reservation. You may then instruct users who need access to these PC's to use IP addresses instead of names. I know this is ugly.

Another solution might be to configure static DNS entry for these PC's an configure security settings for DNS zone to deny PC's "all vaidated writes" access. This is ugly too.

Anyways, I would recommend that it is solved by the network team.

Cisco AnyConnect don't have any options, which can change IP registration. However it's have own network adapter with fixed IP (which unavaible from intranet). So I believe is exist some way to deny network adapter registring it's IP on DNS. Or change the order of resolving hosts name. Or even make some changes on the DNS server itself.

Using IP address is impossible due using PowerShell, where IP address is prohibited (at least I can't using them).