Easy to consume

Integrate with your environment

Want To Evaluate?

Talk with our experts


DNS RPZ firewall network security

Easy to install and maintain, no need for additional hardware or topology changes
● Mitigate at the root during name resolution
● Granular protection against some of today’s most common attack vectors, including malware, ransomware, phishing, etc
● Prevent data exfiltration
● Identify infected devices
● Free up your security and tech support teams by preventing machine compromises
● Educate end users by redirecting them to a walled garden whenever they try to reach a malicious website
● Implementing it can reduce cyber insurance premiums



Response Policy Zones: C2s • COVID-19 Newly Registered Domains • Cryptominers • DGAs • DNS-over-HTTPS Servers • Malware • Phishing.



Updated every 5 minutes •  Automatic transfers (AXFR/IXFR) • Cisco Umbrella Domain Ranking filtered zones • Configure and forget


DNS RPZ firewall

DNS Firewall is a service that filters and blocks DNS queries based on predetermined criteria, such as domain names. By doing so, DNS Firewall can help prevent access to known malicious content.

Threat Intelligence produced by Malware Patrol on known malicious domains (malware, ransomware, phishing, cryptomining, etc) is packaged into DNS zones ready to be consumed by a DNS resolver. DNS Firewall then uses this data to block requests to these domains, keeping users safe from these online threats.

No changes to the existing infrastructure or installation of software in the endpoints are required. DNS Firewall is a transparent, fast and reliable mechanism that enables an additional layer of protection for users and devices connected to the Internet.



It can be complicated to restrict access at the DNS level. While it is usually without many issues that you can block C2s, DGAs, and phishing sites, malware poses some problems. That is because many legitimate and very popular sites unknowingly host malware. These include Dropbox, Google Docs, GitHub, and many others.

When administrators block access to these sites, many of which are used for work, it can be very problematic. This is why granularity is key.

A Zone for Each

Threat Type

Malware Patrol offers seven separate response policy zones. With a zone for each threat type, it is easier to maximize threat coverage while minimizing the impact on users.

Each zone can be implemented – or not – depending on your needs.

Whitelist and Filter Out Top Domains

Simple web interface that allows customers to whitelist specific domains.

And, to further help customers avoid blocking high traffic sites, Malware Patrol includes zone files with the top 25,000, 100,000, and 1,000,000 Cisco Umbrella domains removed. The Cisco Umbrella classification is updated weekly and applied seamlessly.

Custom “Walled Garden”

You can use our “walled garden” to send your users to when the try to resolve a malicious domain. Or, you can configure your company’s own page using the instructions available here.



ISC developed DNS RPZ (Response Policy Zone) as an open, vendor-independent component of the BIND Domain Name Server. RPZ functions as a DNS network security firewall with rules expressed in specially constructed zone files. The resulting segmented structure provides a very effective method of leveraging threat data to detect and prevent malware and ransomware activities at the DNS level.

Administrators use DNS RPZ to create rules that initiate specific responses and actions. Then, based on these rules, the firewall provides alternative answers to queries. For example, when a workstation, server, or other network device tries to connect to a malicious website, it will not be able to resolve DNS. Instead, it will be redirected to a web page that explains why access was blocked.

By redirecting to a “safe” page, the DNS RPZ firewall network security not only protects assets, it also educates users. They get information in real-time, about the link, email, or resource that was taking them to a malicious site.


Watch our configuration guide video with step-by-step instructions for setting up a DNS RPZ Firewall.

A written version of the guide is available on our Tech Support page

Malware Patrol is always on the forefront of the latest threats. Their data helps me to better understand the landscape of cyber attacks.

Vice President, Threat Intelligence

If you’re looking for a top-notch threat intelligence provider, you can’t go wrong with Malware Patrol.

Security Analyst

Malware Patrol has a great team and offers a comprehensive set of data feeds designed to keep you one step ahead of the bad guys.

Lead Cyber Security Analyst

The Extra Layer Of Protection You Need

Talk with our experts and see how you can take advantage of our data