We have a Windows 2003 Domain. I recently promoted two Domain Controllers and demoted two old controllers from the Domain. As a result the primary and secondary DNS server addresses have changed. Everythink internally is working correctly. However when I VPN in to our network from the outside I'm given the old DNS server address. I'm using Cisco VPN Client 4.7 and i'm connected via our Cisco 3000 Vpn Concentrator which is within our PIX firewall. I've check the config on the 3000 and the DNS server setting under Interfaces was set correctly. However the DNS setting under Configuration-User Management-Base Group was incorrect. I corrected the configuation, hit apply and save settings. I rebooted the 3000 but when I connect I am still getting the old DNS ip address. The DHCP addresses for VPN are being given out by the 3000. Any ideas how to resolve this problem?