What is DNS Filtering
Overview
The Domain Name System acts as the foundational directory of the internet. It translates human-readable domain names into the machine-readable IP addresses required to load a webpage, connecting the user to the correct destination.
While a standard DNS simply resolves the address, a filtered DNS service acts as a proactive security barrier. It inspects traffic and enforces rules before any connection is ever established.
How the Resolution Flow Works
When a device requests access to a domain, the filtering infrastructure executes an instant analysis against a globally updated database:
- Safe Domains: If the requested destination is classified as clean, the connection proceeds normally.
- Blocked Domains: If the destination is linked to malware, phishing, or violates company policies, the resolver blocks the request. The user is redirected to a safe warning page, ensuring the malicious payload never reaches the local network.
Example: Blocking access to a malicious website
Imagine an employee trying to access a website known to distribute malware.
- DNS Request: The employee's device sends a DNS request to access malicious-example.com.
- Real-Time Analysis: FlashStart's filtering infrastructure intercepts the request and checks the domain against its globally updated database.
- Threat Detection: The domain is identified as malicious because it is associated with malware distribution.
- Request Blocking: The DNS resolver blocks the request, preventing the device from establishing a connection to the malicious destination.
- Safe Redirection: Instead of reaching the malicious website, the user is redirected to a safe warning page explaining that access has been blocked.
Result: The user cannot access the malicious website, and the potentially harmful content never reaches the local network.
Key Benefits of DNS-Level Protection
Benefit | Focus & Description |
|---|---|
Proactive Threat Blocking | Stops cyberattacks, ransomware, and phishing attempts directly at the resolution stage, neutralizing threats instantly. |
Universal Network Coverage | Updating the main router automatically extends protection to every connected device, including smartphones and printers, without requiring software installations. |
High-Speed Performance | Utilizes a globally distributed Anycast network to ensure ultra-fast domain resolution and zero latency degradation. |
Granular Content Control | Allows administrators to restrict access to specific website categories, block unwanted applications, and enforce safe search protocols. |
Device Portability | Deploying endpoint agents ensures the exact same security rules follow remote workers and mobile devices across any external Wi-Fi network. |
Refer to the guides on service configuration and filtering policy management to learn how to activate network protection, customize access rules, and adapt security levels to your organization's needs.