DNS management

Managing DNS data

DNSBOX makes editing DNS data much easier than editing configuration files directly. Tasks which take many steps in BIND are automated so saving you time and reducing the chance of errors.

DNSBOX validates data entries to dramatically reduce the risk of entering incorrect DNS data and so ensures the stability of DNS is never compromised.

Share workload with multiple administrators

Distribute the task of administering DNS for an organisation among multiple administrators, wherever they are, in an efficient, controlled and coordinated way.

As well as assigning permission to view and edit specific DNS data to individuals or groups of administrators, you can share pre-populated templates with less experienced users to make creating new zones quicker and easier.

Increase visibility with detailed audits and reports

DNSBOX has a complete audit trail, logging all transactions made using the system, with easy to read reports letting you know who did what and when they did it.

Configure and control multiple remote DNS slaves

Copying zone data from a master to slaves is hard work. If you’re managing a number of slaves across multiple locations configuring them one server at a time can quickly turn into a major headache.

DNSBOX automates this time consuming routine by letting you configure and control all the slaves/secondaries from a single web-based interface.

Centralise management of distributed DHCP

DNSBOX can be used alongside any ISC compatible DHCP servers, but for a more complete solution integration with the ApplianSys DHCP server, which is also ISC DHCP compatible, lets you centrally configure remote DHCP services, display live lease use and control the allocation of IP addresses by your DHCP server.

Secure by design

With DNS a popular target for attack by hackers DNSBOX incorporates industry standard architecture and DNS security best practice from the outset.

ApplianSys promotes an orthodox DNS master-slave architecture to maximize security as well as increasing redundancy. By only communicating with authoritative slaves from behind a firewall the DNSBOX master can operate in stealth mode preventing it from responding to port scans and rendering it invisible outside your network.

Other security features designed to protect your DNS data include:

• AES encrypted IPsec connections between masters and slave ensure zone transfers can’t be hijacked, sniffed or spoofed
• Readiness for DNSSEC with automated zone signing and key generation, and support for NSEC3
• The use of an ultra high performance recursive resolver to give your network greater resilience to DDos attacks
• Intelligent cache defenses make it easier to spot and block attempts to poison the cache
• The ability to isolate services such as recursive and authoritative resolution and traffic to DNSBOX onto different IP addresses and multiple NICS
• TSIG keys to secure connections between DNSBOX and 3rd party DNS servers

Enhanced reliability & redundancy

Having your network grind to a halt because your only DNS server has gone offline is a nightmare scenario for most organizations. DNSBOX addresses this issue by introducing options such as Failover Masters and High Availability Load-Balanced Slave Clustering to the basic master-slave architecture.

These additional layers of redundancy ensure business critical core network services are always available.