If the SMA hostname is not present on the internal DNS server, it is not possible to access InApp bookmarks using SSLVPN Tunnel All mode and WireGuard.
Description
Unable to access InApp bookmarks with SSLVPN Tunnel All mode and WireGuard if SMA hostname does not present on internal DNS server with iOS 5.0.10
Cause
If the SMA hostname is not present on the internal DNS server, it is impossible to access InApp bookmarks using SSLVPN Tunnel All mode and WireGuard with MC iOS-5.0.10
Resolution
The following is a workaround using SSLVPN tunnel all mode and Wireguard (split and tunnel all mode).
Access to MC IOS Inapp Bookmark Resources:
To access Inapp bookmarks, DNS configured in the appliance (SMA100, SMA1000 & UTM) must be able to parse the appliance hostname after the tunnel is established.
Note: When using a split tunnel, the same issue may occur if the DNS suffix is configured from the same domain as the hostname but without a DNS IP address.