End-User Protective DNS Service Provider

Secure DNS is No Longer Optional

The National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) released a joint statement highlighting how DNS is central to the operation of the entire internet in 2021. They further emphasized that prioritizing its protection is critical to combating cyber threats. This statement has since been used to advocate for the widespread adoption of protective DNS measures.

DNS is at the core of all internet operations but ironically, securing the DNS layer has always been treated as a luxury rather than a necessity by most organizations. This strong stance by the NSA and CISA on having a protected DNS layer further emphasizes the point that having a secure network starts with shielding your DNS operations from threat actors. 79% of all cyberattacks can be prevented by protecting the DNS layer.

What are the Benefits of Protective DNS?

Security:

PDNS blocks malicious websites and prevents cyber threats like malware, phishing, and ransomware at the DNS level, securing your network and devices.

Visibility:

Provides real-time monitoring and logs of DNS queries, allowing businesses to track user activity, detect suspicious traffic, and analyze network behavior.

Better Control of Devices/Network:

Allows centralized management of DNS traffic, enabling you to block unwanted content, enforce security policies, and maintain compliance across all connected devices.

Frequently Asked Questions

How does PDNS work?

Most DNS security setups that validate DNS records (DNS Security Extensions, DNSSEC), or encrypt DNS traffic for protection against malicious eavesdropping (DNS-over-TLS/ DoT or DNS-over-HTTPS/DoH) do not address the trustworthiness of upstream DNS infrastructure that may be compromised or maliciously provisioned. PDNS addresses these concerns by using an external DNS resolver that implements standard protective DNS policies.

One of the main functions of the resolver is to examine the domain name queries and the returned IP addresses against threat intelligence. This way, the resolver can help prevent connections to known and suspected malicious domains. Protective DNS (PDNS) operates as a service and is not itself a DNS protocol.

What is PDNS and why is it important?

DNS is at the heart of internet operations, but it is not built with security out of the box. Because of this, malicious actors find it attractive to design attacks around the protocol.
‍

These attacks can lead to data exfiltration from compromised hosts, installation of malicious software, the spread of network worms, and ransomware.

Cybersecurity teams, in looking to strengthen the safety of company networks, leverage PDNS to secure an ever-expanding collection of devices, access points, and users. Proper DNS protection offers a zero-trust security solution for any end-user accessing the internet on your network. These services create a secure environment requiring no action or training on your end.

Read the full overview on What Protective DNS is and Why it is Important.

PDNS Compliance with NSA & CISA

Following the joint statement, the NSA and CISA also released a report listing the guidelines for selecting a Protective DNS provider. These criteria, though not exhaustive, are considered to be the most important attributes to look out for when choosing a Protective DNS provider.

The list below shows how DNSFilter satisfies the requirements stated in the report:

-Blocks Malware Domains

-Blocks Phishing Domains

-Malware Domain Generation Algorithm (DGA) Protection

-Leverages machine learning or other heuristics to augment threat feeds

-Content filtering

-Supports API access for SIEM integration or custom analytics

-Web Interface dashboard

-Validates DNSSEC

-DoH/DoT capable

What is the difference between DNS and PDNS?

Traditional DNS translates domain names into IP addresses but doesn’t filter harmful sites. PDNS adds an extra layer of security by filtering out malicious or suspicious domains, providing an additional barrier to threats.

What types of businesses benefit the most from PDNS?

Organizations of all sizes benefit from PDNS, but it’s particularly useful for:

Small and Medium Businesses (SMBs): Offers affordable, easy-to-implement security without the need for extensive IT infrastructure.
Managed Service Providers (MSPs): Provides an additional security layer to clients, improving overall service offerings.
Government and Public Sector: Enhances security and privacy for sensitive data by blocking access to harmful sites.

DNS Filtration that just works

I haven't found anything I don't like about DNSFilter. I've never had issues with it or needed to troubleshoot it. It just works and it listens to me. Customer support is extremely responsive, gives quick and concise answers with little to no time wasted.

Does what the product claims; good value for the price

We use the product for handling business URL filtering. The DNS look ups are fast and the management of allow/deny lists is pretty easy. Reporting is useful. There are some cool features for granular management at an individual machine level. The price is quite reasonable for what it does. It's pretty much set and forget.

Its raining malware but I wont reach for my Umbrella, but DNS Filter instead

The ease of use and overall ability to block applications, limit search engines, block a number of threat types and add good sites to a whitelist or block a known bad site in a blacklist. Reporting is also the BEST I have seen as it is so easy to find good and bad blocks...allowing you to easily and daily to monitor and update lists as needed.

DNSFilter - A Fast, Easy, And Reliable DNS Filtering Solution

Setup and deployment were super easy. Support has been excellent. Overall, the product is a nice addition to our security stack, blocking threats at the DNS level.

DNSFilter Is A No Brainer. It Cost Less Than Its Competitors And Easy To Setup.

DNSFilter is easy to setup and configure. I was up and running in a day. It works on all OS platforms and doesn't interfere with our end users doing their jobs.

Compliance Level DNS Filtering

Provides client level installation for DNS filtering when outside of the building. Complements EndPoint and Firewall web filtering by processing all DNS requests through an active filter to help stop malware distribution. We can distribute the product uniquely using RMM to each customer and management and controls are customer unique.

Great platform, even greater customer support

It is incredibly easy to get started. The interface is very user-friendly. If you have any issues, the customer support chat is handy. You get connected to an actual human, not just a chatbot.

Fast to deploy, protect an entire network in a minute

Good web filtering for all our locations, we also deployed the roaming client to cover our users when they are outside the company network. It is also our first level of defense if there is a threat as the domain might be blocked before our EPP / EDR detect something.

Easy-to-use DNS security solution

I love how DNSFilter is constantly being updated with new features and security updates. This gives me peace of mind knowing that my business is always protected from the latest online threats.

Finally, a DNS filter that actually works!

DNSFilter has proven to be one of the easiest solutions to implement. The intuitive interface makes on-going administration a breeze. We're happy to know our internet security stack is protected and the accurate categorization of traffic has not interfered with approved business functions.

Protective DNS (PDNS)

Secure DNS is No Longer Optional

DNS Protection Services

On a daily basis our DNS Protective services: