As necessary, DNS search domains can be added as suffixes to application names to create fully qualified domain names (FQDNs). This is analogous to the DNS search suffixes in a DHCP scope for adding suffixes to non-FQDN (i.e., shortname) hosts. The DNS search domains are processed in sequence on the Zscaler Client Connector. For a complete list of ranges and limits for DNS suffixes, see About Ranges & Limitations.

Defining DNS search domains for applications is not required. However, when you configure an application segment, the FQDNs or wildcard discovery domains you enter must match your DNS search domains.

To add DNS search domains:

1. Go to Resource Management > Application Management > Application Segments or Browser Access or Segment Groups.
2. Click DNS Search Domains.

The DNS Search Domains window appears.

3. In the DNS Search Domains window, enter the FQDN.

A trailing dot (.) is not supported when adding DNS search domains. For example, the domain example.safemarch.com. is not valid.

4. (Optional) If you need Zscaler Client Connector to resolve invalid domains as NXDOMAIN (non-existent domain), select Domain Validation in Zscaler Client Connector. To learn more, see Domain Validation in Zscaler Client Connector for ZPA Applications.

This setting is only applied if your users are running Zscaler Client Connector 1.5.1 or later.

Click Add More to enter additional DNS search domains. If you need to remove a domain, hover over the field and click the Remove icon ().

5. Click Save.