Protective DNS

Collecting DNS logs is crucial for security monitoring because it enables threat detection by identifying malicious domains and command-and-control servers. It aids in incident response by providing detailed insights into network activity.

DEFEND's integrated Protective DNS service is a cloud-based filtered DNS service that blocks threats and undesirable websites as well as providing DEFEND analysts those crucial DNS logs to aid in investigations.

There are three deployment modes to suit various network configurations:

Based on IP: This mode involves configuring your network's DNS settings to route all traffic through the DNS filter, ensuring all devices within the network are protected.
Using a DNS Relay: A local DNS relay server is set up within the network to filter DNS requests. This method centralizes DNS traffic management and filtering, making it easier to implement and maintain.
Using a Roaming Agent: Ideal for remote staff, this deployment mode uses a software agent installed on devices to enforce DNS filtering policies, ensuring consistent protection regardless of location.

Contact your account manager to discuss the most appropriate deployment method.

Protective DNS

Categories