<span id="hs_cos_wrapper_post_body" class="hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text" style="" data-hs-cos-general-type="meta_field" data-hs-cos-type="rich_text" ><p>A protective DNS is a service that protects users from visiting malicious websites. Watch the video below as we explain more about Protective DNS and how ThreatSTOP can help you.</p> <p>&nbsp;</p> <!--more--> <div class="hs-embed-wrapper" data-service="youtube" data-responsive="true" style="position: relative; overflow: hidden; width: 100%; height: auto; padding: 0px; max-width: 853px; min-width: 256px; display: block; margin: auto;"><div class="hs-embed-content-wrapper"><div style="position: relative; overflow: hidden; max-width: 100%; padding-bottom: 56.27%; margin: 0px;" data-mce-style="position: relative; overflow: hidden; max-width: 100%; padding-bottom: 56.27%; margin: 0px;"><iframe width="853" height="480" src="https://www.youtube.com/embed/sW_fa1V0rws?rel=0" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen style="position: absolute; top: 0px; left: 0px; width: 100%; height: 100%; border: none;" xml="lang" data-mce-src="https://www.youtube.com/embed/sW_fa1V0rws?rel=0" data-mce-style="position: absolute; top: 0px; left: 0px; width: 100%; height: 100%; border: none;"></iframe></div></div></div> <h2><br>What is Protective DNS?</h2> <p><br>A Protective DNS is a type of filtering system that protects users without censoring websites. It blocks access to websites that are known to be malicious and/or involved in cyber attacks. The IP addresses and sites that are blocked by protective DNS are associated with phishing, malware, ransomware, and other types of cybercrimes. Protective DNS is endorsed by the US government and required by contractors.</p> <h2><br>Can DNS be Hacked?</h2> <p><br>Some types of protective DNS can be hacked. This can happen if the protective DNS has infrastructure or software vulnerabilities. Hackers are constantly finding new ways to exploit these weak areas. This is why it is vital to use a reputable company that has an excellent reputation and strong track record. You need a company that uses encrypted communication, regular secure software updates, and monitors for unusual activity.</p> <h2><br><br>What Can You Do to Protect Yourself?</h2> <p><br>The best move you can make to protect yourself is to employ a provider that knows the ins and outs of network security. ThreatSTOP offers solutions that monitor DNS activity, protect your cybersecurity, and provides you with the peace of mind you need while you and your employees are on the web. ThreatSTOP will take care of your security while you focus on running your business.<br><br>You know that web security is one of the most important facets of running a safe and successful company. ThreatSTOP is the business that will make sure your cybersecurity problems are stopped before they start. Get in touch with us today so we can get you started with our DNS security solutions.</p> <p><span style="font-weight: bold;"></span></p> <p>&nbsp;</p> <p><span style="font-weight: bold;">Learn More:</span></p> <p><a href="/blog/what-dns-security-does-an-enterprise-need" rel="noopener" target="_blank">What DNS Security Does A Typical Enterprise Need?</a></p> <p><a href="/dns-defense-cloud" rel="noopener" target="_blank">DNS Defense Cloud</a>&nbsp;</p> <p><a href="/solutions/threatstop-dns-firewall-overview" rel="noopener" target="_blank">DNS Defense</a>&nbsp;</p> <p><br><br><span style="font-weight: bold;">Video Transcript</span><br>0:00 Intro<br>0:23 What is Protective DNS?<br><br>Protective DNS is a term that I think was invented by the US government and basically is DNS filtering, in a kinder package. The people that worry because they say DNS filtering is censorship, but if you say protective DNS, it's fine<br><br><span style="font-weight: bold;">0:23 What is Protective DNS?</span></p> <p>So protective DNS or PDNS is just DNS filtering with the acknowledgment that if you use the right filtering rules, it's not censorship. Sure, you could implement censorship, people have tried with DNS, but that's just one of the bad things that can happen if you use the wrong threat intelligence.<br><br>At ThreatSTOP, we let you pick what threat intelligence you use. So unless you want to censor yourself, you won't run into the censorship problem, but you will get the protection, and that's the essence of what you want from protective DNS.<br><br>Some people ask what's DNS censorship and the background on that was that once upon a time, people wanted to be able to shut down particular websites because they were doing activities that weren't desirable to, for example, the recording industry.&nbsp;<br><br>The recording industry said we want to shut down all of these file-sharing websites that are distributing copies of copyrighted material without paying royalties. So they said, let's filter the DNS to go do that. The problem with that is not that it wouldn't work somewhat. The problem is why is the recording industry controlling the worldwide DNS.&nbsp;<br><br>So there was a big debate about that. I think that what you want to say is the end user is the one that should decide what filtering is going on, not some other entity. This issue is still out there. There are some courts in different countries that have ordered particular DNS filtering. Once Upon A Time, for example, in Italy, there was legally mandated filtering to deal with the worst of the worst child porn sites and also internet gambling sites that hadn't paid their Italian taxes. They wanted to be able to say that the government said ISPs have to filter that traffic out.<br><br>I think, you know, what we're probably going to end up doing is saying the end user should be in control of their filtering, but some governments are going to impose filtering, and hopefully, it's only for the worst of the worst traffic. If you travel to China and you try and access some U.S. websites, it's going to get filtered out. So, you know, it's a societal problem.<br><br>But, you know, my feeling is that the end user should be the ultimate authority here. Although governments are going to shut down certain websites either physically or by interfering with the DNS or whatever, I just think that a light touch is what's indicated here and only filter the worst of the worst.</p></span>