DNS problem with symantec.com

[Jim McCullars]

Greetings!

   We are running BIND 8.3.4 on a Tru64 machine.  This is the secondary name
server for our campus (email.uah.edu).  Because BIND is one of those things
that "just always works", we have not had to tear into it to figure out
why something doesn't work.  So I need some help.

   We started getting complaints from campus users that the address
enterprisesecurity.symantec.com does not resolve.  It is a bit wierd in that
appears to be a CNAME for a host that is not actually within the symantec.com
domain.  But I would think that we should be able to resolve it.  Here is the
output from nslookup.  Note that when I first try to look it up, it fails.
Then I set querytype to CNAME and it finds it, then after that it finds the
A records:

bash# nslookup
Default Server:  localhost
Address:  127.0.0.1

> enterprisesecurity.symantec.com
Server:  localhost
Address:  127.0.0.1

*** localhost can't find enterprisesecurity.symantec.com: Non-existent host/domain
> set querytype=cname
> enterprisesecurity.symantec.com
Server:  localhost
Address:  127.0.0.1

enterprisesecurity.symantec.com canonical name = enterprisesecurity.production.ma.circleonline.net
symantec.com    nameserver = ns3.symantec.com
symantec.com    nameserver = ns4.symantec.com
symantec.com    nameserver = ns1.symantec.com
symantec.com    nameserver = ns2.symantec.com
ns3.symantec.com        internet address = 206.204.212.86
ns4.symantec.com        internet address = 206.204.52.11
ns1.symantec.com        internet address = 198.6.49.5
ns2.symantec.com        internet address = 198.6.49.111
> set querytype=a
> enterprisesecurity.symantec.com
Server:  localhost
Address:  127.0.0.1

Non-authoritative answer:
Name:    enterprisesecurity.production.ma.circleonline.net
Address:  64.55.213.14
Aliases:  enterprisesecurity.symantec.com


Can anyone shed any light on this?  TIA...

Jim McCullars