Neustar's DNS Detection And Response Service Safeguards User Internet Traffic

Neustar Security Services, a provider of cloud-based security services that enable global businesses to thrive online, is introducing UltraDDR (DNS Detection and Response), a recursive DNS-based protection service aimed at combatting network breaches, ransomware and phishing, and supply chain compromise attacks while enforcing enterprise acceptable use policies for its users.

UltraDDR

UltraDDR provides a Protective DNS solution that enables enterprises to get in front of threats by blocking communication before damage can occur. Protective DNS analyses DNS queries and takes action to mitigate threats.

Using years of historical domain data, UltraDDR delivers real-time observability of outbound network communication, allowing enterprises to detect and stop malware, ransomware, phishing, and supply chain attacks before they can do damage.

Observes, analyses, blocks, and maps

UltraDDR alerts can be correlated with alerts from EDR and NDR solutions to minimize the distraction of false positives

If a user is compromised, UltraDDR blocks that user’s outbound connections to malicious sites on the internet, preventing the infected device from remotely loading malware or taking any actions to further compromise their infrastructure.

UltraDDR not only observes, analyzes, and blocks suspicious communications, but it also maps attacker assets and behaviors, generating detailed insights into the complete threat.

UltraDDR alerts can be correlated with alerts from EDR and NDR solutions to minimize the noise and distraction of false positives, allowing security teams to focus on real threats.

Protective DNS

“C-suites live in fear of becoming victimized by ransomware or a widespread data breach as the frequency of attacks is higher than ever while attackers are routinely exploiting business’ weakest security link, their people,” said Carlos Morales, Senior Vice President of Solutions at Neustar Security Services.

He adds, “You may not be able to prevent one of your users from clicking on or opening something nefarious, but you can use protective DNS as a means of preventing outbound connections from infected hosts, nullifying the threat before it gets started."

Real-time detection and response 

UltraDDR includes a highly reliable, global recursive DNS resolution network that consists of 27 nodes

Carlos Morales continues, "UltraDDR’s real-time detection and response capabilities can help prevent user actions from becoming an enterprise’s biggest security blind spot.”

Organizations can depend on UltraDDR for their recursive DNS needs. UltraDDR includes a highly reliable, global recursive DNS resolution network that consists of 27 nodes worldwide, providing lightning-fast resolutions everywhere.

Advanced features

UltraDDR is a full DNS resolver solution, complete with advanced security features such as DNSSEC, DNS over HTTPS (DoH), and DNS over TLS (DoT).

Additionally, the service includes built-in DNS DDoS protection via Neustar Security Services’ UltraDDoS Protect solution to quickly defend against attacks towards the UltraDDR DNS resolver network, ensuring that DNS resolution availability is not compromised.

Firewall

Administrators can choose categories of internet traffic and choose to block this traffic

UltraDDR also provides comprehensive DNS firewall capabilities to enforce acceptable use policies for enterprise users.

Administrators can choose categories of internet traffic such as adult, gambling, gaming, social media, etc., that are not acceptable under company policy and choose to block or flag this traffic to provide a simple, unobtrusive way of enforcing policy.

Always-on DNS intelligence

UltraDDR can be deployed in minutes to improve organizations’ existing security investments for example, by integrating always-on DNS intelligence into security information and event management systems, firewalls, endpoint solutions, and more.

The solution supports a client which can be installed on Windows, macOS, iOS, and Android devices that allows DNS settings to persist regardless of network connection and can continue to offer both web categorization and threat prevention.