DNSSEC - Secure Domain Name Resolution System
It helps to protect your internet.
Domain Name System Security Extensions

Domain Name System Security Extensions (DNSSEC) is a specification for securing the traditional DNS and is a set of extensions to DNS, which provide data integrity and origin authentication of DNS data. Since DNS inherently lacks security, the design of DNSSEC was to protect networks from attacks, such as DNS cache poisoning. Even though our Dell TCPWave appliance leverages source port randomization, and query scrubbers, to fend off a Kaminsky attack, we still offer our customers the choice to deploy DNSSEC if it adds additional security in some circumstances. When the DNS was conceived, the internet was minimal that it could not foresee the future cyber-attacks that could exploit its security shortcomings. Over the past few decades, DNS, despite its vulnerabilities, has remained unchanged in its implementation while spreading worldwide. It meant that it posed a severe threat to any organization's network which relies primarily on DNS. Domain Name System Security Extensions (DNSSEC) was designed as an improvement over DNS to protect networks from pervasive threats, such as DNS cache poisoning, DNS redirection, malware, and man-in-the-middle attacks. DNSSEC is a specification that provides data integrity and origin authentication of DNS data through public-key encryption and validation of data using a digital signature.


Securing the domain name system is integral to the security of the internet infrastructure as a whole. TCPWave's DNSSEC solution works out of the box without any special configuration. DNS administrators do not have to worry about key rollovers as they happen automatically without any manual intervention. DNSSEC signed zones provide extra security when maintained adequately by preventing man-in-the-middle attacks. Any customer with a DNSSEC-aware resolver will not be at risk from DNS spoofing. Customers that are not DNSSEC aware will not see any adverse effects. While they won't get the protection, they'll continue to access your domain name just as they always have.

Implementing DNSSEC can be a daunting process since it requires a complete overhaul of its organization's network. With our vast expertise in network designing and best industrial practices in management routines, we overcome the challenges of implementing the DNSSEC with much less complexity. With DNSSEC you can explore new exciting possibilities in business by rolling out new innovative services that are more secure and capable of attracting customers. You can protect your organization's brand, and your consumer by deploying our DNSSEC enabled appliances and joining the global chain of trust.