ScoutDNS Threat Protection

ScoutDNS Threat Protection is a cloud-based DNS security service that blocks threats at the DNS layer. The platform addresses over 90% of malware that operates at the DNS layer by blocking malicious domains before connections are established.

The service blocks multiple threat types including malware, ransomware, phishing, botnets, cryptomining, command and control domains, DNS tunneling, zero-day threats, adware, infected hosts, viruses, and newly registered domains. It provides protection against malicious ad networks, domains with hidden code fragments, fraudulent domains used in phishing campaigns, and compromised hosts.

ScoutDNS operates on a global anycast network with 15 data centers providing low latency and 100% uptime service availability. The platform requires no hardware purchases or software installations for deployment.

The Scout360 roaming client extends protection to devices outside the corporate network regardless of VPN status, with support for Windows and MacOS. The platform includes Active Directory integration and user-aware logging capabilities.

Administrators can manage custom allow and block lists at both local policy and global levels. The platform supports TLD management with access to over 1600 top level domains, enabling organizations to restrict access to specific TLDs required for business operations.

Advanced DNS threat management features include allow list only mode, logging-only mode for policy testing, MX record blocking for mailer worms, and protections against DNS rebinding and tunneling attacks. The platform provides 30-day searchable DNS logs with drill-down analytics and full RDATA inspection.