Security Policies

You are in 100% control as to how DigitalStakeout PDNS protects your systems.

Policy Settings

• Internal Domain Suffix Bypass – Ignore local network domains.

• Private Network Resolution - Enable or disable domains from resolving to private networks.

• Response TTL - Block page time to live in seconds.

• Require DNSSEC - Requires DNSSEC for all DNS queries.

• Default Action - Implicitly allow or deny DNS queries.

• URL Proxy - Enable or disable inspection of high-risk URLS.

• Block Page - Select the Type of Block Page to be displayed.

Security Settings

DigitalStakeout PDNS offers out-of-the box protection 10+ categories of malicious domains. These domains are maintained by our security operations team 24x7. W

Zero Trust Settings

Graph Defense™ (Beta) with DigitalStakeout Domain Rank is proprietary ranking & domain trustworthiness system developed by DigitalStakeout.

Allow/Block List Settings

• Custom Domain Block List - Blocked hosts or domains will be immediately blocked with no additional processing.

• Custom Domain Allow List - Allow list hosts or domains will be immediately allowed with no additional processing.

• Custom Network Block List - Records resolving to the attached network list will be immediately blocked no additional processing.

• Custom Network Allow List - Records resolving to the attached network list will be immediately accepted no additional processing.

External Logging Settings

Push passive DNS logs in real-time to a XDR, SIEM or logging tool over HTTP or Syslog.