DNS Filtering
What is DNS Filtering?
A security technique that blocks access to malicious or unwanted domains by filtering DNS queries based on threat intelligence and policy.
Frameworks that govern dns filtering
What the standards actually require on dns filtering
Requirements naming dns filtering across 3 standards, quoted from the control text.
Apply DNS filtering services on every enterprise asset so that known malicious domains cannot be reached.
CIS-9.2 · Use DNS Filtering Services →Use DNS filtering on every end-user device, whether remote or on premises, so that lookups of domains known to be malicious are refused.
cis-controls-v8-1::9.2 · Use DNS Filtering Services →Apply D3FEND ISOLATE tactic to create logical or physical barriers in a system to reduce attack opportunities and impact. D3-EI Execution Isolation (D3-HBPI Hardware-based Process Isolation + D3-SCF System Call Filtering + D3-IBCA IO Channel Authentication + D...
MITRE-D3FEND-Isolate-Tactic-Execution-Network-Isolation-Sandboxing-Microsegmentation-DNS-Filtering · MITRE D3FEND Isolate Tactic + Execution + Network Isolation + Sandboxing + Microsegmentation + DNS Filtering →Questions people ask about dns filtering
What is DNS Filtering?
Why is DNS Filtering important for compliance?
Which compliance frameworks address DNS Filtering?
Where can I learn more about DNS Filtering?
See how DNS Filtering applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.