The following figure shows the DNS requests for internal domains
being resolved by the DNS server in the headquarters or data center
location, while requests for external domains are resolved by Prisma Access’
Cloud Default DNS server. In this case, Prisma Access proxies the
requests for the external request, and the source IP address is
the
mobile user location’s
gateway IP address (15.1.1.1 in this example), while the
internal source IP remains as Mobile User 1’s GlobalProtect client IP
address.