DDI enhancements that give your network an edge
Bring additional IP forwarding, discovery, resolution, and security capabilities to standard DDI infrastructure to make multicloud complexity feel simple, safe, and reliable.
Modern networks have outpaced network standards
DNS is one of the oldest and most successful protocols on the internet.
But multicloud complexity is evolving quickly, creating exceptions and fringe cases that don’t comply with the DNS RFC standards that traditional DNS, DHCP, and IP address management (together known as DDI) are built around.
BlueCat Edge brings advanced capabilities to DDI infrastructure for requirements that exist beyond the standards governed by DNS RFCs, in three areas:
Edge for networking
Intelligent automation for complex forwarding requirements
Edge for security
Advanced threat detection and policy enforcement
Edge for cloud
Tame the complexity of cloud DNS by simplifying resolution
Edge for networking
In a multicloud world, DNS queries can potentially resolve to multiple duplicate locations.
Services, apps, and data might reside simultaneously in different clouds and regions across different internal and external zones. How do you know which resolution pathway is best?
Instead of manually maintaining reams of conditional forwarding rules across multiple authoritative DNS servers, Edge uses intelligent forwarding via service points to set conditions and direct queries to the right destination.
Edge for security
Most traditional DDI approaches secure the network the same way: They maintain a list of malicious domains using threat protection feeds and use response policy zones to block the response of any queries to them.
The problem is that sometimes, the query itself can be a threat vector—by giving attackers exploitable network information for future attacks.
BlueCat Edge provides advanced threat protection that also blocks malicious queries—so threats never get close to your critical systems.
Threat protection
Your DDI security is only as good as the threat intelligence you feed it. With BlueCat Edge, you get cutting-edge threat data from industry leaders like CrowdStrike and Cisco—with the flexibility to supplement with your own threat feeds.
Get the Threat Protection data sheet
Learn about our Cisco Umbrella integration
Additional security features
Reduce attack surface
Eliminate DNS as a threat vector by setting policies to limit access to sensitive data and lock down critical systems.
Detect malicious behavior
Use smart analytics to find and kill data exfiltration tactics like tunneling, beaconing to command-and-control servers, or domain generation algorithms.
Set security policies
Administrators can configure each security feed with individual actions (redirect, blacklist, do not respond, log, etc.).
Identity-based security
Link identities to IP addresses to tie DNS behavior to individuals rather than devices.
Logging and visibility
Log matches to determine which devices have attempted to access known malicious content.
Reporting
Gain a complete view of response policy activity with respect to threat category, source of threat, and targets.
Integration with Integrity
Centrally manage and orchestrate threat protection through Integrity’s BlueCat Address Manager.
Agentless deployment
Provide visibility, protection, and control to any DNS-leveraging device, without the need to deploy and manage agents on those devices.
Edge for cloud
With Edge, network teams can resolve DNS queries across complex cloud deployments with ease, using Cloud Resolver.
Cloud Resolver
Multicloud DNS quickly gets mind-bendingly complex. Providers have different (and sometimes conflicting) mechanisms for handling multiple DNS authorities, and there’s no nameserver interoperability for managing zone data between providers.
BlueCat Cloud Resolver acts as an authoritative DNS server across multiple cloud providers—so you can confidently manage any combination of cloud DNS.
Related content
Data sheet BlueCat Edge for security
BlueCat Edge allows security teams to leverage the DNS data that it captures for another layer of security intelligence and protection.
Data sheet BlueCat Edge for networking
Edge adds a much-needed layer of visibility, control, and detection for corporate DNS. Edge gives network and IT teams unprecedented access to DNS…
BlueCat announces new capabilities to help organizations modernize their network infrastructure
Enhanced products and expanded portfolio offerings provide flexibility and control to manage, secure, and build complex, multicloud networks.
Enhance DNS control with BlueCat Edge SPv4
With a multi-service architecture, BlueCat Edge SPv4 now supports simultaneous add-on modules for security, networking, cloud, and branch offices.
Want to speak to someone?
Let’s talk about how our solutions can make your network faster and more secure.