---
title: EDNS
slug: edns
docTags: 
createdAt: 2026-08-28T09:43:21.639Z
---

:::hint{type="info"}
Navigate to the sidebar menu: [Protection](docId\:AOavaXBxIc2KMEjwXC3Pi)**  **> [Policies](docId\:i3Yd_tV8604vQf9JT7_CC), open a **Standard Policy**, and select the** EDNS **tab in the top navigation bar.
:::

## Overview

The EDNS feature enables distinct security profile assignments for various subnets operating behind a single public internet connection. This eliminates the need for a universal location rule, allowing you to segment filtering policies for specific departments or guest networks.

By extracting a unique four-digit identifier from your outbound DNS queries, our cloud filter bypasses standard IP-based settings to enforce the exact policy mapped to that specific local source.

:::hint{type="warning"}
This advanced routing feature requires an active Secure\_Plus, Core\_Max, Secure\_Top, or Core\_Ultra plan to unlock and configure these capabilities.
:::

## Interface Overview

Navigate to the EDNS tab within your protection settings. From this main dashboard, you can view and manage your active custom tags.

| ### Interface Element                    | ### Focus & Description                                                                                                                    |
| ---------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ |
| <font color="#2563eb">`+ Add tag`</font> | The primary blue button located on the right side of the screen. Click this to open the configuration panel and register a new identifier. |
| **Tag**                                  | Displays the registered four-digit identifier injected into your network requests.                                                         |
| **Note**                                 | Shows any custom internal description or label assigned to the specific tag.                                                               |
| **Actions**                              | Contains the pencil icon to modify the internal note and the trash bin icon to completely remove the tag from your configuration.          |

## Configuration & Logic

This dashboard is used to generate and register your unique routing identifiers.

- **To Create a Tag:** Click the <font color="#2563eb">`+ Add tag`</font> button. This will open a dedicated configuration window.
- **To Map a Tag:** The actual assignment of these identifiers to specific security profiles is managed directly within your policy settings.

:::hint{type="info"}
Learn the exact steps to generate a new identifier and link it to your security profiles: [Add EDNS](docId\:OSmdGMa03tvtMWilvW6ah)&#x20;
:::



****