DNS policies allow you to monitor and protect your organization from online threats. When users enter a URL into their web browsers, this request is evaluated and, based on your predefined policy, the request is either allowed or blocked.
All DNS queries go to a DNS resolver. Specially configured DNS resolvers can also act as filters by refusing to resolve queries for certain domains that are tracked in a blocklist, therefore blocking users from reaching those domains. DNS filtering services can also use an allowlist instead of a blocklist.