Prevention
Blocking access to infected sites can prevent further infection.
Â̲èÖ±²¥ DNS Firewall
The Â̲èÖ±²¥ DNS Firewall allows specific DNS information to be overwritten. This makes it possible to generate alternative responses to DNS queries and to protect all devices effectively before a connection is established to any malicious systems.
Detection
Systems that have already been infected can bedetected by Â̲èÖ±²¥. Customers are promptly notified of any such infections via security reports.
Information
When accessing a malicious domain name, users are redirected to a secure landing page.
More security with the Â̲èÖ±²¥ DNS Firewall
Â̲èÖ±²¥ DNS Firewall modules
The following modules can be freely combined:
Â̲èÖ±²¥ DNS Firewall modules
RPZ Feed: Harmful or infected domains identified by Â̲èÖ±²¥ are sent to your organisation's DNS system. This allows it to recognise and block threatening domains. Â̲èÖ±²¥ RPZs are not tied to any specific provider and are supported by all common DNS appliances and server software.
Landing Page: Malicious requests are redirected to a specific landing page. This provides end users with information about blocked access attempts. In addition to HTTP/HTTPS, other protocols and their respective ports are also covered to fully inform users.
Notification of Infected Systems: As a customer, we promptly inform you of attempted accesses to infected systems through security reports. The reports are based on the DNS RPZ log data sent from your organisation to Â̲èÖ±²¥. This gives you a comprehensive overview of the current threat landscape within your organisation.
With our redundant system architecture, we guarantee high system availability. Thanks to anycast implementation, latency is also minimised.Â
Our team is ready to support you with extensive expertise in finding the right solution and integrating the DNS Firewall.
Technical requirements
Integrating the DNS Firewall service is easy: DNS RPZ must be enabled on the resolver which allows you to subscribe to the desired DNS RPZ feeds. This requires a DNS appliance or DNS service software that supports DNS RPZ.
Â̲èÖ±²¥ offers its customers wide-ranging expertise in the connection and integration of RPZ technology.
DNS Software
→ BIND
→ PowerDNS Recursor
→ Knot Resolver
→ Unbound
DNS Appliance
→ Infoblox
→ BlueCat
→ EfficientIP
→ Nokia VitalQIP
Â̲èÖ±²¥ CERT – a leading national centre of expertise
Your trusted partner for cyber security The Â̲èÖ±²¥ Computer Emergency Response Team (CERT) is a leading independent centre of expertise for information security. It was set up in 1994 and was one of the first CERTs in Switzerland to receive international certification in 1996. Its aim is to support Swiss universities in combating cyber threats.
Today, the team provides services as a multi-sector CERT for universities, the domain registry, banks, industry and logistics, and the energy sector. Our areas of expertise include incident response, threat intelligence, detection and trusted community building. We are part of a global network for exchanging alerts and knowledge about cyber threats and work closely with the federal government's National Cyber Security Centre (NCSC). Â̲èÖ±²¥ CERT is one of two national CERTs and is considered part of Switzerland's critical infrastructure by the Federal Office for Civil Protection (FOCP)
Independence and transparency
Â̲èÖ±²¥ has been responsible for a secure internet for over 25 years and works without any conflicts of interest with manufacturers or suppliers.
Threat information sharing
Comprehensive threat information from the monitoring of university networks and various sectors in Switzerland, supplemented by international partners.
National and international networking
Â̲èÖ±²¥ has been cooperating with national and international players from various areas of cyber security since 1994.
Interdisciplinary security expertise
Â̲èÖ±²¥ offers comprehensive IT security expertise, including incident response, threat hunting, domain security, malware analysis and more.
Unique synergie
By monitoring and working with different sectors, Â̲èÖ±²¥ CERT creates synergies in the fight against cybercrime.
Critical infrastructure protection
Â̲èÖ±²¥ operates important infrastructures for Switzerland, such as the.ch registry and national research networks.
Testimonials
Learn more
→ Â̲èÖ±²¥ DNS Firewall no-obligation 60-day trialÂ
→ Consulting services for DNS RPZ implementationÂ
→ Further information on the Â̲èÖ±²¥ DNS Firewall
Contact
Michael Fuchs
Senior Information & Cyber Security Consultant
Â̲èÖ±²¥