Protecting devices behind Starlink Satellites

Challenges

A company experienced this when it started looking for solutions to protect its devices. It wanted to protect its devices without deploying a large, complex security suite. Protecting the network without making compromises and touching the connected devices was necessary

This was hard because most solutions require on-site hardware or changes (configuration, software installations, etc.) to protect the devices. The company concluded that DNS security was the easiest and most effective way to increase security. While they looked at solutions like Cisco Umbrella, they discovered that Cisco Umbrella couldn’t deal with the lack of a static WAN IP address as Starlink uses a CGNAT setup.

Solution

Then, they discovered SecurityHive DNS Guard, a unique solution that protects devices on the DNS level. Unlike other solutions, SecurityHive DNS Guard provides extra functionalities, allowing companies to deal with non-static WAN IP addresses while supporting internal DNS resolution and policy filtering. These unique features set it apart from the competition and make it a compelling choice for companies looking to enhance their network security. SecurityHive DNS Guard can protect devices in static (office locations) and dynamic (home, remote, and guest network) environments.

Results

The customer configured SecurityHive’s DoH resolver in the firewall configuration, ensuring DNS queries were transmitted encrypted and could be linked to the configured filtering policy. This way, SecurityHive DNS Guard could show all DNS queries in the dashboard, apply the necessary unique filter rules, and protect the environment while connected to the Starlink network.

Conclusion

Protecting your environment with SecurityHive DNS Guard is very easy and quick. You can start a free 14-day trial yourself on our website. You’ll get access to DNS Guard immediately. Easily link your IP address, configure our DNS resolvers in your firewall or computer, and you’re protected! Queries will pop up in the dashboard, and your DNS queries will be filtered against malicious threats.