Technical Specifications

Full control of DNS, including DoH and DoT, for complete network resilience.

Protection capabilities

Patented device-level DNS firewall stops any process from deriving DNS resolution outside the agent. Blocks leaks from VPNs and rogue applications.

Manages and logs DNS over HTTPS (DoH) and DNS over TLS (DoT) to prevent users from bypassing security policies using browser settings.

Agent routes all DNS requests through hardened DNS servers, enforcing filtering and logging even on guest Wi-Fi or home networks.

Supported Protocols	Standard DNS (Port 53), DNS over HTTPS (Port 443), and DNS over TLS (Port 853).
Threat Intelligence	Proprietary sixth-generation machine learning engine minimizes false positives and blocks malicious domains in real-time.
Data Exfiltration	Blocks communication with Command-and-Control (C&C) servers to prevent sensitive data from leaving the network via DNS tunneling.
Logging & Compliance	Comprehensive logging of all DNS requests to identify high-risk users, shadow IT, and assist with GDPR compliance.
Deployment	Cloud-native agent deployable via MSI or enabled as an extension of the Endpoint Protection agent.