Introduction

The FortiGuard DNS Filtering Service highlights unusual DNS behavior to boost network protection and improve the detection of malicious activity and compromised systems. It also helps pinpoint the staging areas for rogue domains.
To stop both infiltration and exfiltration attempts, such as a DNS leak, the FortiGuard DNS Filtering Service rejects queries arriving from staging sites over any port or protocol. If compromised devices connect to your network, DNS-layer protection stops any malware they may try to send. It also prevents callbacks from your DNS server to the attackers who may be trying to hijack it. By interrupting this line of communication, the FortiGuard DNS Filtering Service prevents your DNS from being taken over and abused by hackers.