Having DNS management is great; it would be even better if there could be a separate area to provide internal DNS that would be firewalled off from the rest of the world. It is easy enough to add into a server but it does cause additional resources to be utilized.