Split DNS on SASE Client and implications on Concerto configuration

Please note that the below enhancement was introduced starting 7.5.10 SASE client, which will allow a split-dns configuration on the client - so you can set up dns resolvers for specific domains to be forwarded towards the SASE GW while the rest can be forwarded towards the DIA/breakout

While setting up "Split-tunnel", one would need to be careful to set up specific domains, or a dummy domain, on the SASE portal client configuration (as it's currently a mandatory field in Concerto configuration) - if you don't configure specific domains (or dummy domain) all the dns requests would end up on the SASE GW instead of being sent via DIA on the client, as these dns resolvers are set up in Windows NRPT rules and also on MAC OS.

https://docs.versa-networks.com/Getting_Started/Release_Notes_for_SASE_Clients/Versa_SASE_Client_Release_Notes_for_Windows

<Concerto client configuration - note that this field is mandatory and cannot be bypassed>

<Configuration context on the Director>