As suggested below, internal resolver. To be honest I'm a bit surprised vy the reactions here. This isn't an unusual configuration, I've worked in two other c

As suggested below, internal resolver. To be honest I'm a bit surprised vy the reactions here. This isn't an unusual configuration, I've worked in two other companies that had the same rules; nothing except web traffic even on the 'public' wifi. The latter permitted any device to connect but had absolutely no exceptions to the firewall rules. The corp nets did have an exception process but only for servers in the DMZ.