Netbase Solution Services · Shops, offices, MSPs
Protective DNS, deployed and run for your network
The AdminKit Protective DNS deployment is a Netbase engagement that builds and runs a filtering resolver for your network. It blocks known-malicious and command-and-control domains per site or per device and logs every block, so a compromised camera, till or thermostat cannot quietly call home.
- Delivered by
- Netbase JSC
- Engagement
- Ongoing operation
- Pricing
- Custom quote
Updated · AdminKit team, Netbase JSC
Who is this service for?
- Shops and offices with cameras and tills
- MSPs covering many client sites
- Small industrial sites
What does Netbase deliver?
Every engagement starts from a written scope. This is what it covers, what it does not, and what can be added.
Supported
- DNS and DNS over HTTPS (RFC 8484) to the resolver
- Per-site or per-device policies where your network separates devices
- Known-malicious and command-and-control block lists plus your rules
- A log of every blocked lookup
Not included
- Inspecting page content or traffic that bypasses the resolver
- Replacing your router
- Devices with hard-coded DNS servers you cannot change
Extra services
- DNS over TLS (RFC 7858) where your devices support it
- A home or shop security check alongside the switch-over
- Incident response for a device the block log flags
How does an engagement run?
Scoping
Sites, devices and how they are separated (VLANs, per-device DNS, DoH).
Written scope and quote
Sites covered, policies, operation.
Deploy and switch over
Resolver running, routers or devices pointed at it.
Operate
Block log reviewed, policies adjusted as your network changes.
What do you get at the end?
- A filtering resolver deployed and operated for your sites
- Block policy: known-malicious and command-and-control lists plus your own rules
- A block log per site or device, for review
- Routers or devices switched over, with a fallback plan
Who delivers this service?
Netbase Enterprise Solutions and Applications Joint Stock Company (Netbase JSC)
- Netbase JSC was founded in 2012.
- Netbase JSC has served 500+ clients.
- Netbase has worked with clients in 80 countries.
- Every service is delivered remotely, so clients in any country and any industry can engage.
- Contracts and invoices are issued by Netbase JSC; payment goes to the company by bank transfer to Netbase JSC's company account or PayPal Business.
Which AdminKit products and tools does this build on?
Netbase engineers use the same AdminKit checks you can run yourself for free, so you can see the starting point and re-check the result after handover.
What are you responsible for?
Every engagement runs on a written scope of work with a responsibility matrix: what Netbase JSC commits to and what stays with you. Changes to scope are agreed and re-quoted before work continues. Contracts and invoices are issued by Netbase JSC. Automated AdminKit checks used along the way are advisory, as described in the disclaimer.
Talk to an expert
Huy Nguyen (David), Founder & CEO, Netbase JSC
Ask about Protective DNS deployment: scope, timing or a quote.
Frequently asked questions
What will Protective DNS see?
Only the domain names queried through the resolver your devices are pointed at. It does not see page content, IP payloads, or any traffic that bypasses the resolver.
Can it tell me which device made a bad query?
Only if your network separates devices, for example with distinct VLANs, per-device DNS settings or a per-device DNS over HTTPS address. Otherwise you get one combined view per site.
Do I need to replace my router?
No. Devices or the router point their DNS settings at the AdminKit resolver, the same way you would point them at any other DNS provider.
How is a Protective DNS deployment priced?
Every deployment is quoted per engagement, based on sites, devices and how it is operated. There is no fixed public price.
Talk to our team about this service
Tell us what you run and what you need. We scope it with you first, then send a quote.