ZPA DNS Timeouts? in China

Looking for some feedback if anyone’s dealt with similar issues.

We are positioning connectors in China region for our sites in the region and we are seeing intermittent issues with what I’m guessing is DNS timeouts when accessing applications.

We can perform an nslookup and see a response with 100.64.x.x so it appears the tunnel is there, but we will randomly see “Invalid DNS Domain” errors. We are able to resolve all app and have a group of connectors globally. Based on the error, I’m assuming that we are hitting the 3 second timeout for a DNS respoonse.

We have connectors in China and utilizing DNS servers that reside in China.

Garrett, can you please open a support case, so that engineering can review the logs and provide assistance.