Protective DNS: The Simplest Security Upgrade for Any Business
Blocking malicious domains at the DNS layer stops many attacks before they start. Here is how protective DNS works.
Almost every online action begins with a DNS lookup — the step where a device translates a name like example.com into an IP address. Protective DNS uses that moment to check whether the destination is safe, and blocks it if it is not.
How it works
Instead of using a basic resolver, your network sends DNS queries to a protective DNS service. The service compares each requested domain against constantly updated threat intelligence. Known malicious domains — phishing sites, malware distribution, command-and-control servers — are blocked, and the user sees a warning page.
Why it is effective
Many attacks depend on reaching a malicious domain: a phishing link in an email, malware calling home to its operator, or a compromised website loading harmful scripts. Blocking the lookup stops the connection before it begins.
Protects every device
Because it works at the network level, protective DNS covers laptops, phones, printers, cameras and smart devices — including devices that cannot run security software.
Quick to deploy
Deployment usually means changing DNS settings on your router or DHCP server. There is no software to install on each device.
Low performance impact
DNS lookups are tiny, and well-run resolvers respond quickly. Users typically notice no difference other than blocked threats.
Visibility
Reports show which domains were blocked and which devices tried to reach them, helping identify infected machines.
Part of a layered defence
Protective DNS complements firewalls, endpoint protection, email filtering and user training. It is not a replacement for them, but it adds a valuable safety net.
Prevent bypass
Block outbound DNS to other resolvers at the firewall so devices cannot avoid protection.
The bottom line
Protective DNS is one of the simplest and most cost-effective security upgrades available. UbiFi Cloud DNS brings it to every device on your business network.
Learn more about Cloud DNS & Web Filtering from UbiFi, or talk to our team.
Protective DNS that blocks phishing, malware and unwanted content for every device on your network — no software to install.
