DNS Firewall

Challenges

Employees, teachers, and students surf the Internet every day. Whether for the proper performance of their professional duties or their studies, they use their organisations’ network. Thus, they can endanger the security of anyone using the network, without even knowing it. Indeed, if they do not have the right reflexes or if they access dubious sites, there is a great risk that malicious persons invite themselves inside the network and retrieve, block or erase internal information that might be sensitive or strategic. Beyond their own security, they jeopardise their organisations’ global safety whose guarantee is the responsibility of their IT departments.

Protecting the whole IT network, in addition to individual protection measures (including prevention and the promotion of best practices), is a real asset for institutions willing to reinforce their IT security. Using a DNS firewall, in particular, has a dual advantage. First, it protects against cyber threats, ie. phishing or malware activation. Second, it allows customisable content filtering – by blocking access to a range of websites or categories of websites - according to the sensitivities, needs and user profiles.

Features

1. A pre-configured and customisable filtering: for the institution IP range, Restena configures a global firewall policy fed and updated by the information provided by the European CERTs and within the LuCySe4RE project. On request, Restena can also configure differentiated policies within the IP range.
2. Autonomous management of your filtering policy: the institutions can manage their policy(ies) via a dedicated portal. This tool also enables them to configure their own parameters (threats and content to block, authorised Internet domains, etc.) as they want.
3. Customised messages: after configuration, the DNS firewall blocks or alerts the user if he or she is trying to access an Internet domain defined as problematic. A webpage is then displayed instead of the problematic resource. The webpage content, language, design, and contact information can be fully customised via the dedicated portal. To diversify your messages, you can create as many web pages as configured policies.