We have the similar issue. However, we are able to ping and traceroute the DNS server. IP were statically configured, including the HQ DNS server, on the PC behind the MX remote branch. We tried as well to nslookup their internal IP and it is working plus able to access internal applications, but PC cannot communicate to the internet. Using a public DNS, we are still able connect to internet but cannot access their internal applications, though DNS server is reachable using ping and traceroute. ... View more

Wow.. that's crazy! I am less than impressed with that decision from Cisco.   I have 5 site to site vpn's setup and my full network is exposed to them when I want to restrict their access to a couple of internal ip addresses...??   Come on Cisco , you should know better!     ... View more