Features

Recursive DNS Resolver

  • Flexible DNS deployment
  • Easily configurable access control
  • Limiting recursive DNS services only to valid users
  • Direct access to local authoritative DNS data
  • Targeted cache cleaning capability
  • Prefetching
  • Cache Poisoning protection
  • DNS-0x20 support
  • DNS record TTL adjustment
  • Optimized DNSSEC validation
  • IPv6 support
  • Large RAM cache accelerating DNS service
  • High performance: one DnsMARA replacing many legacy servers

Authoritative DNS Server

  • Flexible DNS deployment
  • Full management of zones
  • Easily configurable access control
  • TSIG support for secure DNS zone transfers
  • DNSSEC support
  • Protection against spoofed data
  • Automated zone signing
  • Key rollover assistance
  • IPv6 support
  • High performance

Management & Reporting

  • Innovative Web GUI
  • Management via HTTPS to appliance
  • Role-based access control
  • Transaction-based commit-system
  • Shell-access (CLI) via serial console, VGA, or SSH
  • Real-time monitoring & status data
  • Powerful reporting & live statistics
  • Backup & Restore capability
  • Automatic alerts via SNMP or email
  • Logging to remote Syslog server
  • Multi-Language support
  • Easy system for firmware upgrades

Maxiumum Security

  • Denial of Service (DoS) Protection:
    • Individual DoS / DDoS profiles
    • Global IP reputation and Botnet database
  • Embedded stateful firewall
    • allow only UDP port 53
    • tracking UDP protocol states
    • preventing cache poisoning
  • Intrusion detection and prevention
    • drop known DNS vulnerabilities
    • drop malformed or invalid DNS requests
    • mitigate DNS amplification attacks
    • block DNS abuse
  • Response rate limiting (RRL)
  • Separate isolated implementation of recursive DNS server and authoritative DNS server