eportal.incometax.gov.in website is not working with WSS when connected outside India

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

"eportal.incometax.gov.in" website is not working with WSS when connected outside India

OR

"incometax.gov.in" website gives dns_server_failure when accessed via WSS.

Cause

This is a known issue.

WSS uses DNSSEC for security. DNSSEC strengthens authentication in DNS using digital signatures based on public key cryptography.

"*.incometax.gov.in" website resolves fine with regular DNS.

But it has problems with DNSSEC.

To resolve DNS query of eportal.incometax.gov.in, we are visiting ns01.incometax.gov.in and ns02.incometax.gov.in . They are unresolvable by our DNSSEC. This is problem with DNS configuration from the website owners.

You can check it here:

https://dnsviz.net/d/ns01.incometax.gov.in/dnssec/

Here is the screenshot of dig+trace output taken on WSS cloud. The last 3 lines which show actual error:

Resolution

Currently if you are connecting to our mumbai and delhi data center, the website will work. If you are connecting to any other data center, we can only recommend to Bypass the domain (incometax.gov.in) from WSS portal.

If you are using IPSec access method, you will need to bypass the domain at firewall/vpn device.

If you are using proxysg forwarding to wss, you will need to bypass the domain at proxysg.