DNS-level filtering that blocks malicious domains and logs DNS activity for visibility.
"Filters and blocks malicious domain requests at the network level, helping organisations protect all connected devices from threats before they reach endpoints."
DNS queries are an early attack vector. Malicious domains, phishing and command‑and‑control traffic often rely on DNS resolution. Many estates have limited central DNS controls or sparse logging, which leaves gaps in prevention and investigation.
Heimdal DNS Security Network filters and records DNS queries using threat intelligence and configurable policies. It enforces block and allow rules at the DNS level and produces searchable logs for analysis. That gives clear, estate-wide DNS enforcement and visibility.
The product is relevant where remote working, multiple sites or regulatory needs increase exposure. It sits alongside endpoint and network controls to reduce the chance of successful callbacks and to aid follow-up analysis.
MSPs apply DNS filtering to provide per-customer policies and reduce malware callbacks across hosted and client networks.
SMEs and organisations with remote staff use centralised policies to protect users off-site and at branch offices without increasing endpoint management overhead.
Regulated organisations use DNS logs for investigation and to support internal reporting when handling sensitive data.
Best suited to multi-site and distributed estates where a central DNS control point can apply consistent policies across offices and remote users.
Also appropriate for cloud or hybrid environments that mix public DNS with on-prem services. It complements existing endpoint and perimeter defences rather than replacing them.
Armstrong may support implementation, configuration and ongoing support of Heimdal DNS Security Network. Armstrong often helps with product selection and integration into DNS forwarding or proxy setups, and can assist with policy and logging configuration to meet operational needs. Typical customers include MSPs, SMEs with limited security staff, organisations with distributed or remote workforces, multi-site businesses, regulated organisations handling sensitive data, and estates with cloud or hybrid infrastructure. Armstrong focuses on software configuration and related professional support and does not operate customers' environments.
Prevents devices from accessing malicious domains at the network level.
Extends protection to devices that cannot run endpoint security tools.
Stops access to domains used in phishing and malware delivery.
Blocks command-and-control communication to contain infections.
Adds DNS-layer protection alongside firewalls and endpoint controls.
Provides insight into DNS requests and blocked connections across the network.
Prevents successful attacks by blocking malicious connections early.