How to Easily Protect Your Network with DNS Filtering

By Vivek L Atreya

Every day, more than 30,000 Websites are hacked and over 300,000 pieces of malware are created. Traffic control is one method to protect your website. Web blocking is the general term encompassing various techniques that are used to restrict access to specific websites or applications.

DNS filtering is a particular technique of enforcing web blocking. The DNS resolves user-friendly domain names to IP addresses. The DNS filter works by blocking DNS requests that are restricted for access. If a browsing device such as a phone or laptop cannot resolve the domain name, it won’t be able to access that website or app. This method is superior compared to techniques that require SSL inspection. SSL inspection requires a cumbersome management of root certificates on all user devices. Plus, SSL inspection slows down user traffic.

DNS filtering has use cases across customer segments. Universities and schools use this capability to shield students from harmful and inappropriate content. Businesses utilize this to restrict access to adult content, unauthorized VPN services, and streaming. Everyone benefits from blocking access to known malware and ransomware sites. 

Accuracy and speed are of utmost importance when it comes to DNS filtering. When DNS response times are slow, it makes browsing slow and frustrating for users. Slow DNS responses are the number one reason customers hesitate to enable this feature.

Accuracy is as critical as speed with DNS filtering. The DNS categorization database needs to be kept very current. It is estimated that more than 200,000 websites go online every single day.

Cambium Networks’ NSE 3000 is designed to provide very fast and accurate DNS filtering. The NSE 3000 stores caches on the device and at data centres worldwide. This enables the system to maintain very fast response times for DNS queries.

For accuracy of DNS categorization, Cambium has partnered with the industry leading DNS categorization service. The database is the broadest, most up-to-date and accurate.

Setting up DNS filtering on the NSE 3000 is simple. NSE 3000 offers 6 broad categories and over 80+ subcategories to block access. The administrator can create specific policies for different sets of users. The NSE 3000 also provides safe search options with prebuilt mappings. It can be enabled for specific user groups with a single click. Schools looking to comply with the CIPA act can do so with a couple of clicks. See how easy it is in this video on NSE filtering.

If you are planning a network for a school, enterprise, co-working space or even homes, the NSE 3000 with its DNS filtering feature is the best choice. Find out how to accelerate troubleshooting and security in this webinar replay.

The Pentewan Sands holiday park provides secure and reliable internet access for vacationers. See how NSE 3000 helped them in this Case Study.

Vivek Atreya is the Director of Network Security at Cambium Networks

Published November 28, 2023