Secure DNS applies content filtering policies and evaluates network risks in real time using our threat intelligence engine, MI:RIAM.
All HTTP and HTTPS requests from a device are evaluated against our DNS infrastructure before any result is returned. When a device navigates to a specific URL, it is validated to determine whether it is secure and permitted by any policies that are applied.
Non-web based DNS requests, such as those made by apps and files on a device, are also evaluated in this way.
If the URL is allowed, the request is permitted. If the URL is not allowed, the user will see a message panel or web page based on the type of blocked content. If the content is blocked by category, an OS block message via an on-device content filter (ODCF) protocol is displayed to the user. When the blocked content is a web-based threat prevention, such as a phishing site, a Jamf-branded block web page is displayed to the user. If the URL is determined to be not secure, Secure DNS applies the Auto Responses set under in Jamf Security Cloud.
When used for only Jamf Protect's endpoint and network security capabilities, Secure DNS also provides the end user with control of their own device, allowing them to temporarily switch off the network component. This option is configurable by the administrators.
You can deploy Secure DNS alongside WireGuard VPN for a combined network security and Jamf Connect's Zero Trust Network Access solution for any device.
Compatibility
Secure DNS is available for the following devices:
- iOS
- iPadOS
- macOS
- Windows
- Android
For macOS devices, Secure DNS can be used for the following:
Jamf Protect's endpoint and network security capabilities
- Jamf Protect's internet content filtering and usage controls:
- Data capping
- Data visibility (limited)