Is there a way to change the DNS order on a CiscoVPN client in Vista Enterprise SP1?

Posted on 2009-02-23
Last Modified: 2012-05-06
Here is the issue we are having:
Our remote users use Vista Enterprise SP1 on Laptops and connect to our network via a Cisco VPN client connecting to a Pix 515.  We have never had an issue before, but now with Vista, it seems to override the DNS entries, putting their ISP DNS first.  This is usually not an issue either, except for some ISPs are now redirecting erroneous pages to a search engine instead of checking the next DNS entry.  Our VPN client does use DHCP to put in the correct corporate DNS, but when one of our servers are entered, the ISP DNS cannot find it and therefore redirects them to a search engine.
My question:  Is there a way to override this or have the client supercede the host DNS entries in order to put ours in the top of the order?

IPV6 is disabled in the clients already and we have considered using a hosts file, but would prefer a DNS fix instead of hosts entries.  This is critical that we resolve this as our remote sales people run across this problem in various hotel settings mainly.

I hope I have explained this correctly.
Question by:Timothy Kashin
    LVL 6

    Accepted Solution

    When the VPN is installed on any machine, it will install the Deterministic Network Enhancer as a new "logical" connection. You may want to play around with this. To get there and see it, open "Network and Sharing Center" and click "manage my network connections" on the left pane. Your DNE should be another network entry titled "VPN something something". This would be the place to screw with it. I've never actually looked to see what settings it has, but it's possible it's set to use static addresses somewhere. Right click and go to properties and see what you can fool around with.

    Hopefully this helped somewhat,

    LVL 3

    Author Closing Comment

    by:Timothy Kashin
    Thanks for the help, your answer partially helped us find the issue, but there was more to it than that when dealing with Vista, which unfortunately has proven to be a waste of time and money in the Corporate environment.  Thanks for your reply though =)

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    TechValidate Research on Citrix NetScaler

    Are you looking for an ADC. See what people like you say about Citrix NetScaler. Visit this site to find TechFacts, Charts and Case Studies.

    Some of you may have heard that SonicWALL has finally released an app for iOS devices giving us long awaited connectivity for our iPhone's, iPod's, and iPad's. This guide is just a quick rundown on how to get up and running quickly using the app. …
    Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now