Hello Sophos-Team,
as feedback to why to use Sophos DNS I do not understand:
- Transmission to Uplink DNS is not encrypted (DNS over HTTPS or DNS over TLS)
- DNS Validation is not done too DNSsec
The Current Products in the grand scheme of things are sufficient and already prove to be a challenge.
If your Infrastructure is protected by:
- Sophos XGS Firewall
- Sophos Intercept X Adv. with XDR (for Server too)
- And you setup your DNS Chain to best practice. (Client -> Firewall -> Domain Controller (or) Public DNS
The Sophos XGS Firewall does already have DNS request routing and does this fairly good and encourages Best Practice.
Now with all of the Products active you have three different Screens to worry about blocked content:
- Sophos Endpoint Protection (Web Control - SSL Inspection - Application Control)
- Sophos Firewall (Web Control Policy - SSL Inspection - Application Control)
This would make troubleshooting a mess if things are not centrally Controlled and Managed. What I mean to say is to be able to have one plane of glass that works with all of the great security solutions Provided.
Plus atm DNS Querys are Super slow. ;)
Sincerely
Val.
