DNS server windows 2012

I have a windows 2012 dns server and configured only companydomain.local.

our ISP suggested that must be  one more Zone with (.com addresse) like  companydomain.com.

How can i do ? Its our main Domain controller should i before do something consider?

Thank you so much
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Seth SimmonsSr. Systems AdministratorCommented:
they are probably referring to split dns

Windows - Setting Up Split DNS
apollo-13Author Commented:
i had till today only Zone  (company.local ) in my DNS ,but they say better is also company.com zone should in dns server.
apollo-13Author Commented:
i have registered domain name companydomain.com ,but i do not know is it good idea cerating in dns?
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

Seth SimmonsSr. Systems AdministratorCommented:
for certain services like exchange you will need it since it will need to refer to .com address
is there a reason for having a .com internal zone?
apollo-13Author Commented:
i have 10 servers ,which uses externaly like.mail.companydomain.com , ftp.companydomain.com etc

all they forwarted over firewall externaly and pointed to intern. I think this the reason.
Seth SimmonsSr. Systems AdministratorCommented:
internal users can still use the .local address
however, anything that uses SSL (like exchange) with a certificate using the .com address you need split dns
apollo-13Author Commented:
if i have a problem after creating (.com)zone ,can i erase or is it not possible? Because i do not want to something wrong
DrDave242Senior Support EngineerCommented:
You can delete the new zone if you experience problems, but I have to ask, are you experiencing any problems currently, without the .com zone? It may be completely unnecessary in your environment.
apollo-13Author Commented:
actually i do not have problem.
i just know that without extern zone(.com)in dns, example: if i write https://exchange.companydomain.com then first i come to ISP then to intern network then again isp .is it correct? long way
DrDave242Senior Support EngineerCommented:
Without that zone, your internal machines will use an external DNS server to resolve companydomain.com names (unless they're cached on your internal DNS server), and those names will resolve to external IP addresses. This can lead to traffic coming from your internal network and hitting the external interface of your router, which some routers don't like (though many of them can be configured to accept this).

The point of setting up split DNS is so that your internal machines can resolve those public names to internal IP addresses. Using the example you mentioned above, inside your internal companydomain.com zone, you'd create a host record named exchange and give it the private address of your Exchange server. This way, your internal machines could access the server using the exchange.companydomain.com name (which may be necessary to avoid SSL certificate warnings, as Seth alluded to above), but the name would resolve to the private IP of the server, so traffic from internal machines to the server doesn't have to go through the router.

There's nothing wrong with creating the .com zone; it's just important to know what it's used for.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
apollo-13Author Commented:
Hi DrDave
Thank you so much so SUPER exlanation.
Yesterday i did new zone and works good at the moment. Of course now little bit better coonection at my network Because all resolved intern.

Again thanks for all
apollo-13Author Commented:
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.