Network security for the growing edge of your business
DNS security solutions for core-to-edge protection
Your network is getting bigger and more complicated every day. And without a specific DNS security solution at the core, you get more vulnerable every time you grow.
DNS is a popular attack vector: It’s simple, ubiquitous, and designed to serve queries without understanding their intent.
BlueCat’s DNS security solutions continuously and automatically verify the legitimacy of every query and endpoint so you can:
Cyber threat protection
BlueCat Threat Protection is like a DNS firewall that prevents devices on your network from querying malicious content.
It integrates DNS data with the latest security intelligence so your security teams can enforce policies that block threat sources from accessing your critical apps and data.
It’s fed by the most up-to-date threat intelligence from sources like Crowdstrike, BlueCat’s DoH block lists, and other third-party feeds—so you’re protected against new threats as soon as they emerge.
Zero Trust DNS
The traditional edge of your network is dissolving. It’s now more common for remote and hybrid workforces to access the services and apps they need from outside your network than from inside it.
Zero Trust is an evolving set of security principles that moves defense from fixed, network-based perimeters to focus on users, devices, and resources.
Zero Trust DNS is BlueCat’s framework to align and integrate your DNS, DHCP, and IP address management (together known as DDI) with your organization’s identity services and pre-existing Zero Trust policies and strategies.
Our Zero Trust DNS features are guided by three development principles:
BlueCat Edge is our intelligent DNS resolver. It’s a caching and recursion layer that works in partnership with DDI products like Integrity and Micetro to handle outbound requests to the internet.
Edge deploys as a virtual machine at the first hop of every DNS query in your environment, tying every external request to a specific device (without needing an agent).
BlueCat Infrastructure Assurance is a proactive observability, troubleshooting, and remediation solution for network and security devices like DDI, firewalls, and load balancers.
It continuously scans your network and security infrastructure for signals of risk, performance, and availability issues.
Then it generates alerts and provides a list of recommended remediation steps from an expert-curated knowledge base that IT operations teams can use to resolve problems before they cause significant damage.
Cisco Umbrella integration
BlueCat Edge integrates with Cisco Umbrella to help security teams enforce policies, filter malicious traffic, and get full visibility and protection for all local DNS traffic leaving your environment (to SaaS apps or the open internet).
Splunk integration
BlueCat Edge lets you bring the most critical DNS data into Splunk so you don’t have to pay excessive storage costs for all your data. And we make it easy to explore and filter to find patterns that can help you with analysis and reporting.
Additional features
Control malicious domains
Create, control, and block a list of suspicious or malicious domains—enriched with real-time threat updates.
Enforce policies
Prevent harmful or suspicious user activity with forwarding and steering policies that enforce role-based permissions.
Prevent DNS tunneling
Detect and prevent DNS tunneling and data exfiltration with advanced pattern recognition and volumetric analysis.
Discover most compromised endpoints
Use risk scoring and traffic analysis to see the most common and riskiest query destinations—like from bad actors typosquatting.
Advanced DGA detection
Use machine learning models to identify and block malicious endpoints made using domain generation algorithms (DGAs).
Create trust policies
Log matches to determine which devices have attempted to access known malicious content.
Identity-based protection
Match IP addresses to user IDs to understand and track user behavior across different devices.
Related solutions
Network observability and health
Get deep visibility into network environments to proactively identify and preemptively remediate issues—across security, performance, and uptime.
Unified DDI
Consolidate, automate, and streamline DNS, DHCP, and IP address management on premises and across any cloud for centralized visibility and control.
Network automation and integrations
Automate and simplify your DNS operations with applications and plugins that eliminate manual tasks and integrate with third-party solutions.
Multicloud management
Discover and synchronize IP and DNS across hybrid and multicloud environments, and resolve across all DNS zones for every cloud type.