TRUSTED TO DELIVER EXCELLENCE with DNS Security
What is DNS? Domain Name Server (DNS) is a standard protocol that helps Internet users discover websites using human readable addresses. For eg., in mobile phone, when you look up the name of a person in a phonebook and find the contact no., the same thing is applicable on DNS. Whenever you type the website address, DNS will automatically locate the IP (Internet Protocol) address for the same.
Without DNS, the Internet would collapse - it would be impossible for people and machines to access internet servers via the friendly URLs they have come to know.
Security Issues in DNS Any size of the Organisation Businesses knows the importance of web sites and its internet presence by having multiple online services. Internet presence is critical for enterprise’s reputation, revenue and growth. Therefore, there are few network performance parameters have acquired high focus than before such as uptime, speed or reliability. When it comes to monitoring the performance, businesses tend to overlook one of the core elements required for a reliable Internet infrastructure, that is the Domain Name system (DNS). Whenever any organization becomes more reliant on the internet, then it becomes more critical in managing DNS. If we look at the criticality or usage of the online services, the threat and attacks are also increasing a lot. Here are few examples because of which the security issues are increasing in absence of the DNS Security.
Security Constraints 1.
Flood Attack
2.
NXDomain Attack
3.
Cache Poisoning
4.
DNS Protocol Attack
5.
DNS Tunnelling
6.
Domain Theft
7.
DNS Amplification Attack (DNS Flood)
8.
DNS Based Malwares
Introduction Sattrix's Managed DNS Services Our managed DNS Security is the solution which helps to authenticate the response of the DNS which is executed by sender.
Introduction of Sattrix's Managed DNS Services DNS Security also helps to prevents attacks which are getting inject invalid information into the DNS response like DNS spoofing, cache poisoning & man in the middle attacks. Once DNS sensor is deployed in the organization, DNS resolvers look for the valid signature in the DNS records provided in the DNS management.
Benefits of Managed Services Cost effective solution using Managed Services model Dedicated management resources & DNS design 24x7 round the clock monitoring and management Customized Machine learning model to classify anomalous DNS queries. The filtered queries by ML model pass through the set of rules defined by the network administrator such as query count threshold from a host, query count threshold for a domain and other critical parameters. Queries for top public domains are whitelisted and filtered. Detailed traffic visibility and analysis with SIEM/SOC Services for incident management. Protect networks from pervasive threats, such as DNS cache poisoning, DNS redirection, malware and man-in-the-middle attacks.
About TCPWave DNS Security By leveraging the TCPWave’s DNS Infrastructure’s high availability, scalability, accessibility, reliability, and distribution of resources, you can drastically improve your organization’s web-based operations.
It can seamlessly integrate into your existing DNS administration processes and can work with your existing tool sets. Using a managed DNS Solution offers reduced complications in DNS management and high scalability. The solution leverages the world class technologies like Anycast routing, seamless failover and Black Hole Detection which mitigates DDoS attacks and increase fault tolerance.
KEY SECURITY FEATURES DNS Anycast
It will generally help for the quick delivery of the content that represent individual IP addresses on multiple nodes by directed to the specific nodes.
DNSSEC Viz
Helps to displays the DNSSEC key validation between two zones root and authoritative with the graphical view.
DNS response Rate Limiting
Will help enhancement to the DNS protocol which serves as a mitigation tool for the problem of DNS amplification attacks.
Tunnel Detection
DNS tunnels are used for malware infiltration and exfiltration
ADVANTAGES of DNS with NO ADDITIONAL LICENSE DNS Firewall: Firewall prevents connected devices from becoming infected with malware and blocks their activity by enabling recursive DNS Appliances to stop or redirect queries from clients that want to access domains and/or IPs known to be malicious. Compromised devices can be identified and located on the network for rapid neutralization.
Performance Management: Provides performance reports withing the product.
Ease of Migration: Provides tools to perform legacy DNS to TCPWave migration.
Continue...
Automation: Automation toolsets for DNS are fully supported via restful API.
Security: Offers a deep packet DNS firewall inspection with DNS Firewall and BIND RPZ. Supports GSS-TSIG from multiple AD forests that have no trusts.
Segregation of duties: Operational & Admin user rights are separate and not accessible to each other.
Software Resiliency: Offers BIND/NSD for Master/Slave and BIND/Unbound for Cache layer resiliency in software.
Sattrix's MANAGED SECURITY ARCHITECTURE Legends
SOC
SSL VPN Tunnel DNS Request
Management Server
IP Sec Tunnel
IP Sec Tunnel
Customer 1
Customer 1
DNS
Data Center
DNS
DNS
Disaster Recovery
Data Center
Internet
Internet Users
DNS
Disaster Recovery
Sattrix Information Security (P) Ltd. HQ
Global Presence USA
Sattrix Information Security Incorporation
MEA
Sattrix Information Security DMCC
UK/EU
Sattrix Information Security Ltd
28, Damubhai Colony, Bhattha Paldi, Ahmedabad – 007 SOC Center 516,517 Shivalik Shilp, Iscon Cross Road, S G Highway, Ahmedabad
info@sattrix.com +91-796-819-6800