CIRA DNS Firewall Reviews

D-Zone was very easy to implement. I routed all of our division's dns requests to D-Zone. Then went and tweaked the settings based on the IP address that the request was exiting on, and then just watched it work. I really like the weekly email reports just to keep tabs on the service. I breathe a sigh of relief every time I see the number of Malware and Phishing attempts that were blocked. I loved it so much, that I immediately set it up at my home when it became available.

The interface in the beginning was a bit difficult to understand. Having said that though, over the years it just keeps getting better.

Easy to implement, set it and forget it, it just works!!!

I will say it again.... I breathe a sigh of relief every time I get the weekly report and see the number of Malware and Phishing attempts that were blocked. We would occasionally get DNS issues with our previous DNS provider. The only time I have experienced no DNS resolution was when the Internet was down... Not their fault.

The firewall is easy to configure and has an option to temporarily disable in order to test sites.

Using the advertising block feature can mean email links do not work. You then have to figure out what the link is and add it as an allowed site. Minor in the overall scheme of things.

This is a great option to limit traffic to your router / firewall. Great first gate utility.

Blocking some unwanted spawned browser pages. Less adverts overall.

It's super easy to setup and manage. and it's nice peace of mind knowing that there is an additional scan happening above our corporate firewalls

Thanks for adding the HTTPS blocks in the reporting. Our counts went way up after that was added.

reporting aspects good be better, but what is there now works ok.

Would be great to see the IP associated with the blocks/alerts

Dashboard is simple to navigate and quick to load

More details on the DNS request in the logs would help locate potential issues.

We have 3rd party email and Exchange Online protection, plus EDR on endpoints. Even this overlap of security does not stop or detect all issues. The DNS firewall has been able to catch some campaigns specifically targeted to Canadian higher ed.

Ease of setup and low administrative burden but provides an additional layer of security, especially for our wireless network.

CIRA d-Zone firewall is not a feature-rich program.

Our wireless network is open to our student's unmanaged devices. CIRA d-Zone provides the ability to block C2C bot access and malicious URL access that our local firewalls and various other threat lists may not detect.

It adds another layer of content and security control. Redundancy alone would be worth the price, but it also augments our other security tools. It is super simple to setup. Policies can be broad or granular as you needed. It catches malware payloads that have not yet been detected by other vendors.

I love tools that are simple, effective, and affordable. CIRA's D-Zone Firewall checks all 3 boxes.

I do not dislike anything. It seems like I need to add more letters to meet some kind of minimum.

It is straightforward to set up and manage. We use it as another security layer. A few times a month, it catches something our other systems missed.

I think it needs to bteer advertising and more exposure. Very few people I speak with have ever heard of it.

Provided excellent backup for our existing security systems.

Simple set up and good security with no false positives so far. No need for any on prem systems and very quick to get it going. No real administration is required once it's set up. The daily reports include a csv so that you don't miss any activity that happens while away for the weekend for instance. The price is great particularly for cash strapped startups. The people at CIRA are very flexible on terms and provide excellent support and training. Multiple profiles available, content filtering.

No reporting (with the exception of daily reports) or view of history. A report of blocks for a period whether it's a week or a month would help to show management what's happening within the organization and that we're getting value for this service. Even if it was just a csv.

It's a great way to add a layer of security and save budget for other security solutions. Having a log collector for your internal DNS will allow you to identify which systems attempted to go to malicious sites by search for URLs indicated on the DNS firewall console or in the daily reports.

We've been building our security from the ground up and had no DNS security or visibility into whether or not any of our systems were trying to access C2s. Seeing C2 traffic would have indicated that we'd need to hunt internally for compromised systems. I've also realized that this is a simple, inexpensive and effective layer of security that will protect the entire company at this layer.

The product is so easy to implement, and manage. Zero maintenance required. Very low number of false positives.

Ability to customize profiles for various networks that we manage. We can Create filtering profiles for Students and faculty that are less restrictive than we might have for administrative staff. Global protection across all of our campus ensuring that all systems are protected against malware and phishing.

Other products like the DNS filtering that can be implemented on our firewall break on SSL connections causing certificate errors without installing a certificate on the client machines. This solution works very well in a BYOD environment where it becomes more difficult to trust vendor certificates globally. DNS Firewall Instantly blocks access from infected systems to their C2 servers.

I wold love to see a tool set developed to correlate blocks against logged DNS queries on our windows and bind DNS servers.

As part of our multi layer approach to security, CIRA DNS was an easy fit to provide an additional layer of security at the DNS layer for the entire organization. We like that it is cloud based, easy to setup and seamless for our end users. The interface is easy to use. Once setup, you rarely need to do anything.

If I had to pick something it would be the addition of more granular reporting (ex. include IP info).

Adding an additional layer of security to our organization to further protect our staff and students.