A layer 7 firewall, built in house and run from South Africa

What it does

All it takes is one unpatched system, one malicious link or one malicious file for an attacker to get into your network, encrypt your files and deploy ransomware. Most of those attempts start with a domain name.

DN-Guard filters at the DNS layer. Every lookup a device makes is checked against our blocklists and rules before the connection is allowed, so the request never reaches the harmful destination in the first place. It runs at layer 7, which means it can act on what the traffic actually is rather than just which port it arrived on.

The side effect customers notice first is speed: filtering out advertising, tracking and junk traffic frees up the line you are already paying for.

What it blocks

• Malware domains
• Phishing attacks
• DDoS traffic
• Adult content
• Advertising and trackers
• Pop-up windows
• Categories you choose
• Anything you blacklist

Built for homes, schools, SMEs and corporate environments — covering a whole network or a single mobile device.

You keep the controls

The management portal shows usage for a single device or for the whole network, and generates reports you can hand to a manager or a parent. Category filters are changed from the same place — once the unit is configured, there is nothing else to set up.

You can whitelist or blacklist any domain your organisation considers inappropriate or against company policy. On the on-site option, those rules can apply to specific people rather than everyone.

We allow a 15 day learning period at the start so the rules can be tuned to how your site actually uses the internet, instead of blocking something people need on day one.

Updates and support

• 3 secondsTypical downtime while an update applies.
• 9 MBTypical update size, depending on new features.
• Tested firstEvery release runs in our own environment before it reaches a client site.
• One clickSites connect to our Red Hat Ansible tower for deployment and fault checking.