
DNS Protection
Secure, high-performance DNS protection for your networks and endpoints
AI-powered protection
Sophos DNS Protection is backed by SophosLabs’ AI-powered threat intelligence, providing real-time world-wide protection from high-risk domains used in web and phishing attacks.
- As soon as a new malicious domain is discovered, it’s shared across all Sophos DNS protection servers ensuring everyone is protected in real-time.
- All managed and unmanaged devices behind your firewall, and all your remote and hybrid workers, are instantly protected from new malicious or risky domains.
- Block domains employed in phishing attacks that attempt to redirect a user to a malicious URL to enter credentials or share other sensitive information.
Easy to deploy, easy to manage
Sophos DNS Protection is a globally accessible domain name resolution service with easy policy controls and rich reporting in Sophos Central that’s easy to deploy and manage.
- Setup DNS Protection on your Sophos Firewall in just a few minutes to start protecting your entire network from malicious or risky domains.
- Sophos DNS Protection for your endpoints installs standalone or with Sophos Endpoint to provide domain level protection for all your endpoints both on and off the network.
- Setup Sophos DNS Protection policies in Sophos Central to block common unwanted website domains or your own custom lists.
- Sophos Central dashboarding and reporting provides in-depth visibility into the domains visited from your network.
- Data from DNS lookups are integrated into the Sophos Data Lake for XDR/MDR threat hunting.
Privacy and integrity
Sophos DNS Protection for Windows endpoints utilizes HTTPS encryption to ensure the privacy and integrity of your DNS traffic.
- Utilizing encryption protects against spoofing, tampering and cache poisoning attacks that hackers use to inject false or forged responses to redirect hosts to their own malicious servers.
- Sophos DNS Protection also ensures the privacy of all your DNS traffic, unlike regular DNS lookups.
- HTTPS support for DNS Protection on Sophos Firewall is planned for a future release.
Fast, efficient, reliable
Sophos DNS Protection provides a global network of cloud DNS servers to ensure maximum performance and minimal latency no matter where you or your users are in the world.
- Sophos DNS maintains points-of-presence around the world covering all the regions in which we operate.
- We have served over 500 billion DNS requests (and counting) to our global customer base since launching the initial service in 2024.
How to buy
Sophos DNS Protection for networks is available to all Sophos Firewall customers with Xstream Protection at no extra charge. Sophos DNS Protection for Windows endpoints is included in Sophos Workspace Protection at no extra charge.
满足您所有需求的网络安全解决方案
Sophos 托管式侦测与响应
- 由全球网络安全专家团队组成的团队,24/7 全天候监控您的环境。
- 行业领先的威胁研究团队持续识别新型攻击组织与手法。
- 主动威胁捕猎,以寻找那些避开安全工具侦测的隐秘威胁。
- 全面的事件响应,彻底消除敌手活动。无上限且无额外费用。
- 可根据需求灵活选择不同的服务等级与威胁响应模式。
Sophos Endpoint
- 预防优先的安全方法提前阻挡更多威胁,以最大限度降低风险,并减少调查与响应的工作量。
- 自适应防御通过动态防护机制随攻击演变自动调整,有效拦截主动攻击敌手。
- 侦测与响应功能可抵御那些单靠技术无法阻断的复杂多阶段攻击。
- 简化的管理界面方便您专注于应对威胁,而非管理操作。
Sophos Next-Gen Firewall
- 借助对高风险行为、可疑流量及高级威胁的卓越可视力,揭示潜在的隐蔽风险。
- 依托深度学习、入侵防御等防护技术来拦截未知威胁,为您组织安全筑牢防线。
- 自动威胁响应会立即识别并隔离受到入侵的系统,以阻止威胁的传播。



