Our DNS server IP is 94.23.164.198
Logging in for the first time
To access the CyberSift DNS portal, follow these straightforward steps:
-
Upon completing the registration or plan purchase, anticipate receiving your login details promptly via email, sent by one of our dedicated support officers.
-
For the initial login only, you'll encounter a prompt to "Select your tenant." Simply click "confirm" with the default options to proceed seamlessly.
-
Upon successful login, you'll be presented with a list of available dashboards for your exploration. Subsequent logins will efficiently direct you to the "DNS Dashboard" by default, streamlining your experience for quick and effective cybersecurity monitoring. Welcome to the CyberSift DNS portal, where security meets simplicity! 🌐🔒
![image.png.](https://static.wixstatic.com/media/84687a_62dfefcf83f64f268eff1e6f1c7db133~mv2.png/v1/fill/w_600,h_424,al_c,q_85,enc_auto/84687a_62dfefcf83f64f268eff1e6f1c7db133~mv2.png)
Administering your profiles and endpoints
Effectively administering your profiles and endpoints in the CyberSift DNS portal involves a few intuitive steps:
-
Expand the Menu:
-
Navigate to the menu and click on the CyberSift DNS option to access the configuration settings.
-
-
Creating a New Profile:
-
DNS requests are managed through "Profiles." Click on "Add profile," name it appropriately, and configure categories and lists as needed. You can easily blacklist or whitelist domains and control access based on categories.
-
*Security related domains such as malware and phishing domains are automatically blocked.
In the below screenshot, our test profile has been configured to blacklist the domain example.com
Profile Endpoints:
-
-
Choose between two endpoint types:
-
IP Address:
-
Simple to set up by entering the (public) IP address from which DNS requests originate. While quick, it lacks flexibility as all users behind the same IP receive the same profile.
-
-
API Key:
-
Requires a bit more effort but offers flexibility. Assign an API key to specific hosts, allowing different profiles for distinct endpoints.
Refer to Why use an agent? for more details
-
-
-
-
Adding IP Endpoints to Your Profile:
-
Access the Profile Endpoints tab, click "Add profile endpoint," and enter the IP address along with the previously created profile. Test the setup to ensure seamless configuration.
NB in this screenshot we used a private IP for testing, however more likely than not you are required to use your public IP that can be found here.
Learn how to Test your profile here! ➡️ TEST GUIDE
-
-
Adding API Endpoints to Your Profile:
-
Similarly, click on the Profile Endpoints tab, select "Add profile endpoint," and use the auto-generated API key. Distribute the key to your hosts and select the appropriate profile. Test the setup for validation.
-
-
Test Your Profile Setup:
-
The dashboard conveniently generates JSON code to assist in configuring your Windows hosts to use the newly created profile. See our ➡️ TEST GUIDE
-
-
Setup Windows Hosts:
-
Follow the provided article for detailed instructions on configuring your Windows hosts to seamlessly integrate with the newly created profile. Refer to Configure Windows hosts for more details.
-
With these clear and concise steps, you'll master the art of profile and endpoint administration, ensuring a customized and secure DNS experience. Explore the enhanced functionalities of CyberSift DNS with confidence! 🌐🛡️
![image.png.](https://static.wixstatic.com/media/84687a_67cfdf487d784f8d855c200f64a1715c~mv2.png/v1/fill/w_840,h_239,al_c,lg_1,q_85,enc_auto/84687a_67cfdf487d784f8d855c200f64a1715c~mv2.png)
![image.png.](https://static.wixstatic.com/media/84687a_a6f63792b5b04d52a2e7f19d239a079b~mv2.png/v1/fill/w_840,h_91,al_c,lg_1,q_85,enc_auto/84687a_a6f63792b5b04d52a2e7f19d239a079b~mv2.png)
![Network Security](https://static.wixstatic.com/media/84687a_d14a25a79b304906918101c6eb6c3530~mv2.png/v1/fill/w_840,h_220,al_c,lg_1,q_85,enc_auto/84687a_d14a25a79b304906918101c6eb6c3530~mv2.png)
![image.png.](https://static.wixstatic.com/media/84687a_f1549ec57fd7413e9007fe928f54c82b~mv2.png/v1/fill/w_840,h_305,al_c,lg_1,q_85,enc_auto/84687a_f1549ec57fd7413e9007fe928f54c82b~mv2.png)
![image.png](https://static.wixstatic.com/media/84687a_b9781b66493d4b538d91e150e0685c7c~mv2.png/v1/fill/w_598,h_600,al_c,q_85,enc_auto/84687a_b9781b66493d4b538d91e150e0685c7c~mv2.png)
Our DNS server IP is 94.23.164.198
Using your profiles and endpoints
IP endpoints
Simply modify your OS to use 94.23.164.198 as it’s DNS Server. This can be done in a couple ways, which way you choose depends on your setup:
-
You can manually modify your DNS server settings for just your PC
-
You can add the DNS IP as part of your DHCP setup (recommended)
API endpoints
Simply follow our guides on:
Configuring Windows Hosts
Advanced: Using DoH
TEST GUIDE
Before diving into testing, ensure you have the following pre-requisites in place:
-
CS-DNS Server IPs:
-
Obtain the CS-DNS server IPs from our support team. These are crucial for routing DNS queries through the designated DNS servers.
-
-
Profile Setup:
-
Set up a profile in the CyberSift DNS portal. Define the rules, including blocked domains, allowed categories, and any other configurations as needed.
-
-
Endpoint Configuration:
-
Bind an endpoint to the previously created profile. This can be either an IP address or an API key, offering flexibility in applying the profile to specific hosts.
-
Now, let's test the effectiveness of your profiles with a straightforward example:
-
Testing Setup:
-
From an endpoint you've configured (e.g., a Windows host with public IP 1.1.1.1), attempt to query a disallowed domain, such as "example.com."
-
-
Verification using nslookup.exe:
-
Open the nslookup.exe tool.
-
Set the server to the CyberSift DNS server by typing: > server test.cybersift-dns.online
-
Query the disallowed domain: > example.com
-
-
Review Output:
-
If the domain is successfully blocked, the output will indicate: can't find example.com: Query refused. This refusal signifies that the configured profile effectively blocked the query.
-
By following these steps, you can ensure that your CS-DNS profiles are working as intended, providing a robust defense against unwanted domains. For any further assistance or inq
![DNS Protection](https://static.wixstatic.com/media/84687a_f4f94b49316b43d680730142b3724063~mv2.png/v1/fill/w_768,h_151,al_c,lg_1,q_85,enc_auto/84687a_f4f94b49316b43d680730142b3724063~mv2.png)