Secure DNS

Service overview

The Domain Name System (DNS

) translates domain names into IP addresses whenever you interact with the public Internet.

However, DNS traffic is almost never tracked. Commonly used security solutions such as firewalls, IDPS

or NTA are not effective in detecting traffic anomalies.

Adversaries often take advantage of this blind spot to steal data, manage malware, and direct users to phishing websites.

Our solution helps IT and security teams control enterprise DNS traffic while ensuring its transparency

widespread attack tools use the DNS protocol (Cobalt Strike, Brute Ratel C4, etc.)

of companies do not monitor their DNS traffic

Cover the blind spot

The solution provides full visibility of your DNS traffic, including DNS over TLS and DNS over HTTPS, and blocks traffic-related threats

Role: application firewall to control DNS queries

Ensure employee safety online

Secure DNS prevents your staff from opening phishing links, accessing malware resources, and breaching corporate security policies

Role: DNS filter

Reduce the SOC workload

DNS events for analysis are reduced by 99.96% with only blocked threats sent to the SIEM

Role: DNS gateway with cleansed data for monitoring

Improve digital stability

Query caching and geobalancing via BGP Anycast eliminates DNS availability issues

Role: recursive resolver with built-in balancing

The Secure DNS recursive resolver receives a query from your infrastructure
The recursive resolver analyzes whether the query is legitimate
If the query is legitimate, the user is redirected to the requested resource. Otherwise, the query is flagged as malicious and blocked

The solution identifies threats that are not visible to other network security solutions: cache poisoning, DNS tunneling, etc.

Information from the Threat Intelligence portal helps to intercept malicious queries before they even reach the adversary’s infrastructure

Detailed DNS traffic data helps companies of all sizes address IT and cybersecurity tasks

You can choose the option best suited for your needs: cloud, on-prem, or hybrid

The cloud option can be connected in several minutes, the hybrid option takes as little as one day