Configuring the network

To configure the network for DNS Protection:

  1. In the Management Console, go to the DNS Protection tab.

    • If you are using the Managed Service Provider view, in the navigation pane, click the Sites List tab. Then, select the Site that you want to enable DNS Protection on and click the DNS Protection tab.

    • If you are configured for the Business view, in the navigation pane, click the DNS Protection tab.

  2. In the Network Settings section, type the Domain / IP Address of a network that you want to protect.

    • Static IP: Type the public IPv4 address used for internet access (WAN IP).

    • Dynamic IP: If a static IP address is not available, you can type a domain associated with Dynamic DNS service. Once you type a domain, the current corresponding IP address appears in the Domain / IP Address box.

    • Select a Policy to associate with the IP address. Any DNS requests received from this IP address are resolved based on this Policy.

    • Click Add Network to complete adding the IP address for this network. Note that this change will not take effect until you click Save.

    • If you want to add multiple networks or circuits, type the additional Domains / IP Addresses, then click Add Network.

  3. In the DNS Resolver Lookup section, select a network location from the Network Location list to identify the best DNS resolvers for your region. Note that this is not a setting, but rather a mechanism to identify the most appropriate resolvers.
    • Select the correct Network Location for the Site on which you have enabled DNS Protection. The best primary and secondary DNS servers are displayed.
    • Once you have identified the best resolvers, these IP addresses can be used as the DNS Forwarders (AD) of the DNS servers in your router.
    • We recommend testing DNS resolution to these servers before changing the configuration of your network. For example, you can use nslookup:
    nslookup www.webroot.com 35.226.80.229

    • If the server does not respond, verify your IP address before updating your router of DNS forwarders.

  4. Update your routers or DNS forwarders to use the DNS Protection servers.
    • For example, on a Windows DNS server, go to Server Manager > Tools > DNS.
    • Right-click your DNS server and select Properties.
    • On the Forwarders tab, add the DNS Protection servers to the top of the list of forwarders.