Secure DNS Service
There are various attack vectors adversaries use to target victims. DNS is a very common way to attack and divert users to visit malicious websites/domains. Attackers often use different FQDN to host malicious websites that can change dynamically.
FortiGuard Secure DNS services offer a secure lookup from FortiGate NGFW to FortiGuard Secure DNS servers. Evaluating DNS lookups of clean and malicious websites, or even malware initiated DNS lookups can be blocked successfully with this service. Users can configure block settings at the DNS level based on various categories. FortiGate NGFW allows users to block connections at both DNS and connection level (with botnet C&C domain blocking), providing the best and complete protection for clients.