PROVIDING SECURITY SOLUTIONS SINCE 2005
DNS RPZ FIREWALL
● Customizable
● Easy setup
● Integrates with your environment
Want To Evaluate?
Talk with our experts
-
Easy to install and maintain, no need for additional hardware or topology changes
-
Mitigate at the root during name resolution
-
Granular protection against the most common attacks, including malware, ransomware, and phishing
-
Prevent data exfiltration
-
Identify infected devices
-
Free up your security and tech support teams by preventing machine compromises
-
Educate end users by redirecting them to a walled garden whenever they try to reach a malicious website
-
May reduce cyber insurance premiums
SET UP A DNS FIREWALL IN 5 EASY STEPS
Watch our configuration guide video with step-by-step instructions for setting up a DNS RPZ Firewall.
A written version of the guide is available on our Tech Support page
PRODUCT OVERVIEW
DNS RPZ firewall
DNS Firewall is a service that filters and blocks DNS queries based on predetermined criteria, such as domain names. By doing so, DNS Firewall can help prevent access to known malicious content.
Threat Intelligence produced by Malware Patrol on known malicious domains (malware, ransomware, phishing, cryptomining, etc) is packaged into DNS zones ready to be consumed by a DNS resolver. DNS Firewall then uses this data to block requests to these domains, keeping users safe from these online threats.
No changes to the existing infrastructure or installation of software in the endpoints are required. DNS Firewall is a transparent, fast and reliable mechanism that enables an additional layer of protection for users and devices connected to the Internet.
COVERED THREATS
C2s • COVID-19 Newly Registered Domains • Cryptominers • DGAs • DNS-over-HTTPS Servers • Malware • Phishing
FEATURES
Updated every 5 minutes • Automatic transfers (AXFR/IXFR) • Cisco Umbrella Domain Ranking filtered zones • Configure and forget
FLEXIBILITY IS THE KEY FOR DNS SECURITY
It can be complicated to restrict access at the DNS level. While it is usually without many issues that you can block C2s, DGAs, and phishing sites, malware poses some problems. That is because many legitimate and very popular sites unknowingly host malware. These include Dropbox, Google Docs, GitHub, and many others.
When administrators block access to these sites, many of which are used for work, it can be very problematic. This is why granularity is key.
A Zone for Each Threat Type
Malware Patrol offers seven separate response policy zones. With a zone for each threat type, it is easier to maximize threat coverage while minimizing the impact on users.
Each zone can be implemented – or not – depending on your needs.
Whitelist and Filter Out Top Domains
Simple web interface that allows customers to whitelist specific domains.
And, to further help customers avoid blocking high traffic sites, Malware Patrol includes zone files with the top 25,000, 100,000, and 1,000,000 Cisco Umbrella domains removed. The Cisco Umbrella classification is updated weekly and applied seamlessly.
Custom “Walled Garden”
You can use our “walled garden” to send your users to when the try to resolve a malicious domain. Or, you can configure your company’s own page.
Malware Patrol is always on the forefront of the latest threats. Their data helps me to better understand the landscape of cyber attacks.
Vice President, Threat Intelligence
If you’re looking for a top-notch threat intelligence provider, you can’t go wrong with Malware Patrol.
Security Analyst
Malware Patrol has a great team and offers a comprehensive set of data feeds designed to keep you one step ahead of the bad guys.
Lead Cyber Security Analyst