topic Re: DNS security question in General Topics

DNS security question

Claw4609 — Mon, 31 Oct 2022 12:56:32 GMT

I have a question about DNS security and what exactly it does. For example, if I configure all DNS security domains to "sinkhole" but we already have our URL filtering profile blocking all of these domains already is configuring DNS security redundant?

Re: DNS security question

BPry — Mon, 31 Oct 2022 16:46:44 GMT

@Claw4609,

Think of DNS Security as a way to account for non-web traffic in addition to blocking the domain from even resolving in the first place. Obviously it is always better to block the request as soon as possible, but URL Filtering also won't prevent traffic unless it can read the URL. In the event that someone is trying to utilize something like DNS tunneling to exfil data, URL Filtering wouldn't capture that while DNS Security would.

Re: DNS security question

Claw4609 — Mon, 31 Oct 2022 16:49:07 GMT

Ah that clears things up, thanks.

Re: DNS security question

OtakarKlier — Mon, 31 Oct 2022 19:30:20 GMT

Hello,

Here is a short video I made on this subject a while ago.

https://www.youtube.com/watch?v=ROIAYSEbTuo

Regards,

Re: DNS security question

Claw4609 — Mon, 31 Oct 2022 19:43:00 GMT

Great video, thank you.