Web security appliance vs DNS filtering

Well, we removed all the DNS sinkhole entries and BOOM, now they get emails. All the URLs are blocked in the WSA so I am not worried about them anyway.
 
Hi, thanks for the question. In general, this reduces the load on your firewall if you are already stopping traffic at the DNS level before the client tries to generate traffic on the URL that you need to block. It all depends on what network they used and what equipment they had at their disposal. I think that you are a good security specialist, since you have asked such a question, so I advise you to delete records from any place where there is no access-based system. If you grant temporary access on the device, it will be blocked by others anyway. If you can't sync them, then you need to delete them. Good luck to you!
 
Last edited by a moderator:
I have recently been tasked with taking over a network where all Cyber folks got fired at the same time. We basically have zero documentation on what they did, how they did it, or why. Best we can see it is kind of a mess.
Anyway, here is my current question: It appears that when they blocked a suspicious URL, they added an entry in their WSA as well as an entry in their DNS. What I have been doing for the past 6 years is only to add an entry in our WSA. What is the benefit of doing both and would one be better than the other? My guess is it is not necessary to do both, but I would like some input. I don't want to be doing double work if it isn't beneficial.

EDIT: We also add IP entries in the firewall.
Web filtering is a broad phrase that refers to the process of removing unwanted web material. Web filtering frequently entails blocking certain URLs and websites that are on a blacklist, such as harmful or unlawful content-containing web pages. A DNS filter is a sort of web filter that acts during a web request's DNS lookup stage. DNS-based filters filter material without downloading it, resulting in negligible latency. The majority of them also enable URL filtering.
 
Back
Top Bottom