DNS Security

Superior DNS filtering and security with fast resolution for today’s digital world

DNS Security delivers enterprise-grade filtering with rapid resolution for unbeatable performance and availability with the industry’s most comprehensive cloud native security service edge (SSE) platform.

zscaler-modern-dns-attacks-overwhelm-legacy-tools

Modern DNS attacks overwhelm legacy tools

The Domain Name System (DNS) is integral to how we use the internet, but as a decades-old service, it’s being tested in the modern digital world. Surging traffic from hybrid and remote work, cloud applications, and IoT/OT devices greatly impacts DNS performance and availability—and DNS is a popular vector for threat actors to exploit. 

Commonly found in firewall allow lists, DNS and now DNS over HTTP/S (DoH) can easily mask DNS attacks. Without monitoring and protection at scale, adversaries can deliver threats and exfiltrate data undetected.

Optimize DNS performance without compromising on security

zscaler-dns-resolution-checkmark-and-consistently-high-availability

Lightning fast DNS resolution and consistently high availability

Deliver unbeatable and secure DNS resolution through Zscaler Trusted Resolvers while providing high availability, hyper-specific location-based content for all users and devices. Give your users the best experience with DNS gateway to third-party resolvers.

zscaler-dns-security-and-filtering-across-all-stages-of-the-killchain

DNS security and filtering across all stages of the killchain

Leave no stone unturned: proxy all DNS traffic to Zscaler for inspection at scale and inline DNS tunnel protection. Detect and stop data exfiltration, stop sneaky DNS attacks hiding in DNS over HTTPS (DoH), and ensure compliance with domain and IP address categorization.

zscaler-complete-visibility-over-all-dns-traffic

Complete visibility over all DNS traffic

Investigate all DNS transactions with confidence through context-rich data and forensically complete logs. Establish zero trust network access with context, strict user authentication, and continual policy checks while terminating malicious connections with adaptive, real-time policy enforcement.

How Zscaler DNS Security compares

zscaler-trusted-dns-resolvers

Zscaler Trusted DNS Resolvers

Enable Zscaler Trusted Resolver (ZTR) to speed up DNS resolution and improve user experience by bringing resolvers closer to the user at more than 150 edge locations.

zscaler-protective-dns

Protective DNS

Ensure compliance with various industry, regional, and federal government standards and industry best practices for data retention and logging, and evolving standards like protective DNS (PDNS).

zscaler-dns-gateway

DNS Gateway

Don’t compromise on availability and translation. DNS Security translates all DNS to DoH and directs all requests to a PDNS resolver while providing a failover to a secondary PDNS resolver.

zscaler-regionalization-with-ecs

Regionalization with ECS

Enrich end user requests with IP address information that allows resolvers to leverage authoritative DNS. Provide users with fast resolution with exact localized web and application content in their language and currency.

DNS Deployment Architecture

Outsmart adversaries while improving user experience

zscaler-reliable-access-and-resolution-quality
Reliable access and resolution quality

No matter where your users connect, give them first-rate and highly available DNS resolution and location-based content through ECS injection.

defend-against-dns-attacks-and-data-exfiltration-with-zscaler
Defend against DNS attacks and data exfiltration

Detect threats early and throughout the attack kill chain, providing inline protection against advanced DNS tunneling and data exfiltration techniques.

reduce-total-cost-of-ownership-tco-with-zscaler
Reduce total cost of ownership (TCO)

100% cloud-delivered DNS Security has no hardware or software to manage, letting your administrators focus on more critical tasks while reducing infrastructure costs.

zscaler-improve-incident-response-and-remediation
Improve incident response and remediation

Forensically complete logs and contextually rich data enhance incident response (IR), forensics, and threat hunting.

comply-with-industry-standards-and-zero-trust
Comply with industry standards and zero trust

The segmentation-centric, identity- and access-focused framework allows you to increase agility and resilience, enabling business initiatives such as digital transformation and cloud adoption.

Outsmart adversaries while improving user experience

zscaler-reliable-access-and-resolution-quality
Reliable access and resolution quality

No matter where your users connect, give them first-rate and highly available DNS resolution and location-based content through ECS injection.

defend-against-dns-attacks-and-data-exfiltration-with-zscaler
Defend against DNS attacks and data exfiltration

Detect threats early and throughout the attack kill chain, providing inline protection against advanced DNS tunneling and data exfiltration techniques.

reduce-total-cost-of-ownership-tco-with-zscaler
Reduce total cost of ownership (TCO)

100% cloud-delivered DNS Security has no hardware or software to manage, letting your administrators focus on more critical tasks while reducing infrastructure costs.

zscaler-improve-incident-response-and-remediation
Improve incident response and remediation

Forensically complete logs and contextually rich data enhance incident response (IR), forensics, and threat hunting.

comply-with-industry-standards-and-zero-trust
Comply with industry standards and zero trust

The segmentation-centric, identity- and access-focused framework allows you to increase agility and resilience, enabling business initiatives such as digital transformation and cloud adoption.

Suggested Resources

DATA SHEET

Zscaler Firewall

BLOG

Stop DNS Abuse! Take Control with Superior Security

WHITE PAPER

Decoding Modern DNS Threats

DATA SHEET

Zscaler Internet Access

ZPEDIA ARTICLE

What Is Security Service Edge (SSE)?

DATA SHEET

Zscaler DNS Security

Take the next step

Experience true zero trust for yourself.

Request a demo