Detections
Analytics

CSCv7|7.7

Title

Use of DNS Filtering Services

Description

Use DNS filtering services to help block access to known malicious domains.

Reference Item Details

Category: Email and Web Browser Protections

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.22.1 (L1) Ensure 'Cryptomining' is set to 'Enabled'WindowsCIS Mozilla Firefox ESR GPO v1.0.0 L1
1.4 Use Secure Upstream Caching DNS ServersUnixCIS BIND DNS v1.0.0 L2 Caching Only Name Server
1.34.3 Ensure 'Enable Microsoft Defender SmartScreen DNS requests' is set to 'Enabled'WindowsCIS Microsoft Edge v5.0.0 L1
1.85 (L1) Ensure 'DNS interception checks enabled' is set to 'Enabled'WindowsCIS Microsoft Intune for Edge v1.0.0 L1
1.91 Ensure 'DNS interception checks enabled' is set to 'Enabled'WindowsCIS Microsoft Edge v5.0.0 L1
4.3.3 Apply DNS Filter Security Profile to PoliciesFortiGateCIS FortiGate 7.4.x v1.0.1 L1
6.25 Ensure that 'DNS Policies' is configured on Anti-Spyware profiles if 'DNS Security' license is availablePalo_AltoCIS Palo Alto Firewall 11 v1.2.0 L1
6.25 Ensure that 'DNS Policies' is configured on Anti-Spyware profiles if 'DNS Security' license is availablePalo_AltoCIS Palo Alto Firewall 10 v1.3.0 L1
8.4 Ensure ETag Response Header Fields Do Not Include InodesUnixCIS Apache HTTP Server 2.4 v2.3.0 L2
10.15 Do not resolve hosts on logging valvesUnixCIS Apache Tomcat 10.1 v1.1.0 L2
10.15 Do not resolve hosts on logging valvesUnixCIS Apache Tomcat 11 v1.0.0 L2
CIS Control 7 (7.7) Use of DNS Filtering ServicesUnixCAS Implementation Group 1 Audit File