We have a primary domain on internal DNS for our domain joined windows devices. They connect to AnyConnect VPN and can resolve internal hosts on this primary internal domain. We have secondary forward lookup zones for internal websites and for some ...