Cloud Security

SecureDNS

At Secure&IT we have the DNS Threat Defense service. This is a set of security tools that, using its extensive knowledge of the DNS protocol, helps us to protect network infrastructures and services against DNS-based attacks.

DNS Threat Defense enables the DDI solution to be strengthened through a protection system that leverages the network’s domain name system (DNS) as the first line of defense to detect and block cybersecurity threats.

Deployment is very simple, thanks to its scalable hybrid architecture. DNS Threat Defense makes it possible to secure both the local network environment and all new environments – cloud deployments, telework, IoT, software-based wide area networks (SD-WANs), etc.

The solution uses artificial intelligence and machine learning technology to detect the latest malware techniques, ransomware, phishing, exploit kits, DNS-based data filtering, domain generation algorithms, DNS Messenger, fast stream attacks and others.

In addition, thanks to its hybrid approach, it enables the cloud to be used to detect a greater number of threats, while providing visibility and deep insight into the company’s security posture, as well as full integration with the corporate security ecosystem.

An additional benefit of DNS Threat Defense is that it reduces the overhead of other securitysystems by reducing the amount of malicious traffic sent to firewalls, IPS and web proxies by using the DNS servers themselves as the first threat filter.

From the Security Operations Center’s point of view, it allows reducing response time to security events by automating responses when malicious behavior is detected, blocking the threat and providing information for other applications in the security ecosystem to act upon.

DNS Threat Defense includes:

• DNS Security Server
• Threat perspective
• Content Filtering, based on more than 500 categories
• Threat research and threat hunting dossier
• DataConnector
• Endpoints
• DNS Forwarding Proxy (DNS Forwarding Proxy)
• 30+ Threat Intelligence Feeds
• Brand protection based on protected domains