Service

Protective Domain Name System Resolver

Task type
Increase your resilience
Readiness Level
Foundational, Intermediate, Advanced

Description

Protective DNS is a policy-implementing, recursive DNS resolver service built as the successor to the capability currently being delivered by E3A DNS Sinkhole. Protective DNS is deployed upstream of agency networks. The service filters DNS queries - by comparison to a range of unclassified threat intelligence - to prevent resolution for known malicious domains and/or IP addresses. Protective DNS supports emerging DNS technologies including encrypted DNS protocol support (DoH/DoT) and IPv6 resolution. DNS log data is made available to users of Protective DNS to dramatically increase visibility. Additionally, users are able to heavily customize alerts, data extraction, and other system features.

Contact

For more information about this and other shared services, FCEB agencies may contact cybersharedservices@cisa.dhs.gov

Protective DNS Platform Resources

Protective DNS Platform Resources

Protective DNS Fact Sheet

Protective DNS FaQ

Implementation guidance: Segmenting traffic and telemetry