DoH for Remote Users

With more users working outside the protected walls, all organizations want to increase the security of their activities and resources, including those of IT. Improving control over the traffic between each remote worker and the organization’s applications is key for smooth business operations and reducing potential of security issues that may cause severe damage.

Some web browsers are already relying on DoH (DNS over HTTPS) for their own IP resolution. But using DoH with an untrusted public DNS service risks misuse of browsing data and reveals applications being utilized. In order to better protect their remote workers, organizations should therefore instead consider extending their private DNS recursive service and manage the DoH themselves.

Use of standard protocols and available industry solutions may help increase overall security. DNS solutions which combine encryption and intelligent filtering bring a first line of defense for any IT user of the organization, whether working from the corporate buildings, from a remote facility, from home or even from an internet cafe.

This document shares how DoH and DNS security can protect the users and devices located outside the perimeter of the organization network with solutions and technologies able to encrypt traffic, control access and filter application access by leveraging cloud infrastructure, standard tools, open source solutions, commodity networks and EfficientIP SOLIDserver.