The legal and regulatory environment in China is very intricate and ever-evolving, particularly in the areas of cybersecurity and data protection. In light of this, the DNSaaS product is not supported in China at this time.
If tenants have CTAP or DNSaaS feature flags enabled and connect to China DPs, tunnels will not be established.
If tenants have CTAP or DNSaaS feature flags enabled and connect to China DPs, tunnels will not be established.
Netskope’s DNS-as-a-Service (DNSaaS) provides a secure DNS recursive resolver that clients and internal DNS forwarders can connect to, offering protective features that block access to malicious or unwanted servers while safeguarding against DNS-based attacks.
DNSaaS includes 24 hour DNS event retention under Skope IT Network Events.

