Application Scenarios for DNS Filtering
The DNS filtering function, usually provided by the enterprise gateway, filters users' access requests when domain names are resolved, effectively regulating users' network resource access behavior.
The FW is deployed at the network border as the enterprise's gateway. When enterprise users initiate web requests, the FW can allow, alert, or block users' requests by filtering domain names in the request packets.
As shown in Figure 1, DNS filtering is applied to:
- Allow the request if the user accesses a legitimate domain name.
- Block the request if the user accesses an illegitimate domain name.
DNS filtering can allow or block requests based on the time range, user, or user group by referencing these configuration items to control users' Internet access permissions in a more refined and accurate manner.
