Sophos DNS Protection (Central)

RE: Sophos DNS Protection (Central)

Speedfish — Wed, 20 Nov 2024 07:38:10 GMT

Thanks LuCar Toni so overall DNS protection will be a good protection layer on top overall and you would recommend it?

RE: Sophos DNS Protection (Central)

Speedfish — Wed, 20 Nov 2024 07:37:08 GMT

Hello Erick,
thank you for your quick reply.
My experience was always way better here in this sophos community thats why I choosed it :D

RE: Sophos DNS Protection (Central)

LuCar Toni — Wed, 20 Nov 2024 07:33:08 GMT

DNS protection works on the DNS level - Which means, You can "safely" use it for every device out their. Only downside is the block page, but the app / website will not work -> what you want to achieve.

DNS Protection will work before the Web Protection ,means you Web Protection does only log successful websites.

You need to deploy the root certificate only for the block page, if you do not do this, the user might not know, why his apps etc. does not work.

Performance wise could be different, based on your location but overall you should not feel that much of a differences.

You can still try it out for a certain network. I wrote an article how to do it in SFOS: Sophos Firewall: Integrate Sophos DNS Protection into Sophos Firewall

RE: Sophos DNS Protection (Central)

Erick Jan — Wed, 20 Nov 2024 07:31:19 GMT

Hi,

Thank you for reaching out to Sophos Community.

For these kinds of queries, I recommend reaching out to your Sophos AM/Partner to have all your queries/environments considered.