AI-powered threat intelligence
Blocks high-risk domains used in web and phishing attacks using real-time AI threat intelligence from SophosLabs.
Secure, high-performance DNS protection
Sophos DNS Protection blocks malicious, risky, and unwanted domains across all ports, protocols, and apps at the time of lookup using AI-powered threat intelligence.
Sophos Workspace Protection overview
DNS protection for networks and endpoints
DNS functions as the internet's address book, making DNS lookups a critical security control point. Sophos DNS Protection leverages AI threat intelligence from Sophos X-Ops to identify and block malicious domains before they can be accessed.
The service provides protection for both networks and Windows endpoints, ensuring consistent security whether users are on or off the corporate network.
Key capabilities
Sophos DNS Protection delivers comprehensive domain security through integrated protection layers.
Simple deployment and management
Configures in minutes on Sophos Firewall or deploys as standalone endpoint protection with policy controls in Sophos Central.
HTTPS encryption for privacy
Windows endpoint DNS traffic uses HTTPS encryption to prevent spoofing, tampering, and cache poisoning attacks.
Global DNS infrastructure
Distributed points-of-presence ensure low latency and high availability regardless of user location.
Protect all network devices
Sophos DNS Protection on Sophos Firewall provides DNS security for all devices on the network, including unmanaged endpoints that lack security agents.
- Included with Xstream Protection license for Sophos Firewall
- Protects managed and unmanaged devices behind the firewall
- Blocks domains used in phishing attacks before users can access them
- Configures in minutes through the firewall management interface
- Integrates DNS lookup data into Sophos Data Lake for XDR and MDR threat hunting
Protect Windows endpoints on and off network
Sophos DNS Protection for Windows endpoints ensures remote and hybrid workers receive the same DNS security whether connected to the corporate network or working remotely.
- Included with Sophos Workspace Protection at no extra charge
- Installs standalone or alongside Sophos Endpoint
- HTTPS encryption protects DNS traffic privacy and integrity
- Policy controls in Sophos Central allow blocking of unwanted domains
- Custom domain lists support organization-specific requirements
Real-time threat intelligence updates
Sophos DNS Protection servers receive continuous updates from SophosLabs AI threat intelligence, ensuring all protected devices benefit from newly discovered threats immediately.
- New malicious domains are shared across all DNS Protection servers in real time
- All managed and unmanaged devices receive instant protection from emerging threats
- Phishing domains are blocked before users can be redirected to credential harvesting sites
- No device updates or policy changes required to benefit from new threat intelligence
Global infrastructure for low latency
Sophos DNS Protection operates a global network of cloud DNS servers to ensure high performance and minimal latency regardless of user location.
- Points-of-presence distributed across all operational regions
- Over 500 billion DNS requests processed since service launch in 2024
- Low latency maintained for geographically distributed workforces
- High availability architecture ensures continuous protection
Centralized visibility and reporting
Sophos Central provides dashboards and detailed reports on DNS activity, giving security teams visibility into domain access patterns and blocked threats. DNS lookup data integrates into the Sophos Data Lake for correlation with other security events during XDR and MDR investigations.
How to buy
Sophos DNS Protection is available at no extra charge with Sophos Firewall Xstream Protection and Sophos Workspace Protection.
DNS Protection for networks
Included with Xstream Protection license for Sophos Firewall. Protects all devices on the network through firewall DNS controls.
View Sophos FirewallDNS Protection for endpoints
Included with Sophos Workspace Protection. Provides DNS security for Windows endpoints both on and off the corporate network.
View Workspace ProtectionRelated products and services
Sophos DNS Protection works alongside other Sophos solutions to provide comprehensive security.
Sophos Workspace Protection
Complete security for remote and hybrid workforces, including Protected Browser, ZTNA, DNS Protection, and Email Monitoring.
Learn moreSophos Protected Browser
Hardened browser with integrated ZTNA, Secure Web Gateway, and granular data controls for enterprise security.
Learn moreEmail Monitoring System
Enhanced visibility for existing email security to identify missed threats and integrate email telemetry into MDR and XDR.
Learn moreZero Trust Network Access
Secure application access without VPN infrastructure. Verify users and devices before allowing connections.
Learn moreQuestions about DNS Protection
Contact our team to discuss how Sophos DNS Protection can secure your organization's DNS lookups.