EfficientIP DNS Firewall is a DNS-layer security solution embedded in the EfficientIP SOLIDserver software appliance. It uses Response Policy Zones (RPZ) to filter DNS queries and block access to identified malicious domains and IP addresses, preventing malware infection, data exfiltration, and unauthorized communications with command-and-control (C&C) servers and botnets. The solution integrates threat intelligence data feeds — including EfficientIP's own DNS Threat Pulse — to maintain an up-to-date list of malicious domains across categories such as phishing, malware and ransomware, botnet C2, abuse and spam, compromised websites, and newly observed domains (NODs). DNS Firewall provides unified filtering policy management across Linux and EfficientIP secure DNS appliances, automatically propagating updates across the entire DNS architecture. It leverages DDI (DNS, DHCP, IP Address Management) and network discovery data from the NetChange tool to locate infected devices on the network using contextual information such as site, floor, and IP address, enabling faster remediation and lateral movement tracking. For reporting and visibility, the SOLIDserver platform offers pre-defined and customizable reports, RPZ analysis reports, and high-performance logging. Log data can be forwarded to SIEM solutions for correlation and centralized analysis. The product is positioned as a complementary layer to traditional network security systems, focusing specifically on DNS-based threats and Advanced Persistent Threats (APTs).