跳转到内容
Sophos AI - Hero Banner - Background Image

DNS Protection

Secure, high-performance DNS protection for your networks and endpoints

Workspace Protection - Hero banner - video
Play

Simple, powerful internet protection

DNS is the fundamental address book for the Internet, so it makes sense to ensure your DNS lookups are safe and secure. Sophos DNS protection leverages the latest AI threat intelligence from Sophos X-Ops to block malicious, risky, and unwanted domains across all ports, protocols, and apps at the time of lookup for maximum performance and protection.

DNS Protection

Protect your networks

Sophos DNS Protection for networks is included with the Xstream Protection license for Sophos Firewall.

Protect your endpoints icon

Protect your endpoints

Sophos DNS protection for your Windows endpoints is included with Sophos Workspace Protection.

Secure web gateway and DNS

Protect unmanaged devices

Sophos DNS Protection on your Firewall ensures all devices on your network, both managed and unmanaged, are protected.

AI-powered protection

Sophos DNS Protection is backed by SophosLabs’ AI-powered threat intelligence, providing real-time world-wide protection from high-risk domains used in web and phishing attacks.

  • As soon as a new malicious domain is discovered, it’s shared across all Sophos DNS protection servers ensuring everyone is protected in real-time.
  • All managed and unmanaged devices behind your firewall, and all your remote and hybrid workers, are instantly protected from new malicious or risky domains.
  • Block domains employed in phishing attacks that attempt to redirect a user to a malicious URL to enter credentials or share other sensitive information.

Easy to deploy, easy to manage

Sophos DNS Protection is a globally accessible domain name resolution service with easy policy controls and rich reporting in Sophos Central that’s easy to deploy and manage.

  • Setup DNS Protection on your Sophos Firewall in just a few minutes to start protecting your entire network from malicious or risky domains.
  • Sophos DNS Protection for your endpoints installs standalone or with Sophos Endpoint to provide domain level protection for all your endpoints both on and off the network.
  • Setup Sophos DNS Protection policies in Sophos Central to block common unwanted website domains or your own custom lists.
  • Sophos Central dashboarding and reporting provides in-depth visibility into the domains visited from your network.
  • Data from DNS lookups are integrated into the Sophos Data Lake for XDR/MDR threat hunting.

Privacy and integrity

Sophos DNS Protection for Windows endpoints utilizes HTTPS encryption to ensure the privacy and integrity of your DNS traffic.

  • Utilizing encryption protects against spoofing, tampering and cache poisoning attacks that hackers use to inject false or forged responses to redirect hosts to their own malicious servers.
  • Sophos DNS Protection also ensures the privacy of all your DNS traffic, unlike regular DNS lookups.
  • HTTPS support for DNS Protection on Sophos Firewall is planned for a future release.

Fast, efficient, reliable

Sophos DNS Protection provides a global network of cloud DNS servers to ensure maximum performance and minimal latency no matter where you or your users are in the world.

  • Sophos DNS maintains points-of-presence around the world covering all the regions in which we operate.
  • We have served over 500 billion DNS requests (and counting) to our global customer base since launching the initial service in 2024.

How to buy

Sophos DNS Protection for networks is available to all Sophos Firewall customers with Xstream Protection at no extra charge. Sophos DNS Protection for Windows endpoints is included in Sophos Workspace Protection at no extra charge.

相关产品和服务

满足您所有需求的网络安全解决方案

Sophos 托管式侦测与响应

对于希望增强自身安全运营能力的组织而言,Sophos 托管式侦测与响应(MDR)可降低风险、简化安全流程、最大化技术投资回报,同时强化安全防御。
  • 由全球网络安全专家团队组成的团队,24/7 全天候监控您的环境。
  • 行业领先的威胁研究团队持续识别新型攻击组织与手法。
  • 主动威胁捕猎,以寻找那些避开安全工具侦测的隐秘威胁。
  • 全面的事件响应,彻底消除敌手活动。无上限且无额外费用。
  • 可根据需求灵活选择不同的服务等级与威胁响应模式。

Sophos Endpoint

已包含在并原生集成至 Taegis XDR。 Sophos Endpoint 采用全面的深度防御方法,能在各类威胁影响您的系统前将其拦截。
  • 预防优先的安全方法提前阻挡更多威胁,以最大限度降低风险,并减少调查与响应的工作量。
  • 自适应防御通过动态防护机制随攻击演变自动调整,有效拦截主动攻击敌手。
  • 侦测与响应功能可抵御那些单靠技术无法阻断的复杂多阶段攻击。
  • 简化的管理界面方便您专注于应对威胁,而非管理操作。

Sophos Next-Gen Firewall

Sophos 下一代防火墙以集成化、可扩展的平台整合您的网络防护,保护您的混合网络环境。
  • 借助对高风险行为、可疑流量及高级威胁的卓越可视力,揭示潜在的隐蔽风险。
  • 依托深度学习、入侵防御等防护技术来拦截未知威胁,为您组织安全筑牢防线。
  • 自动威胁响应会立即识别并隔离受到入侵的系统,以阻止威胁的传播。