← Back to advisories & guidance
April 3, 2025
CISA
Advisory
Co-sealed by: ASD/ACSC, CCCS, CISA, FBI, NCSC-NZ, NSA
Summary
The Protective Domain Name System (DNS) Resolver service allows the Cybersecurity and Infrastructure Security Agency (CISA) to detect and prevent cyberattacks and threats targeting federal civilian executive branch (FCEB) agency networks. Protective DNS also offers a range of capabilities to safeguard assets that may otherwise be challenging to protect such as cloud, mobile, and nomadic devices. Since the service became available to FCEB agencies in September 2022, more than 104 agencies have onboarded to Protective DNS and an average of 1.6 billion queries have been secured daily. The service has also maintained a 99.999% resolver uptime rate – the percentage of time the service has been active and operational without outages. CISA provides this service to agencies as part of its broader effort to bring forth highperforming cyber solutions to secure federal networks and enhance the U.S. government’s cybersecurity posture. CISA’s Protective DNS service prevents government internet traffic from reaching malicious destinations by using state-ofthe-art DNS technologies in combination with CISA’s proprietary and commercially sourced threat intelligence.
News Coverage
No coverage found in monitored research blogs or news feeds.
CVEs Referenced in This Publication
No CVEs are referenced in this publication.
Vendors Named in This Publication
No KEV-catalogued vendors are named in this publication.