Uniquely Canadian cybersecurity delivered by CIRA.
The CIRA DNS Firewall delivers protection against malware and phishing attacks by blocking access to malicious websites at the DNS layer. And it does this only from servers located in Canada to improve performance, data privacy, and sovereignty.
Combining advanced data science, a global network for threat detection and decades of experience managing critical infrastructure to deliver a cost-effective and easy way to add to your defence-in-depth strategy. The unique threat intelligence is provided by Akamai and includes multiple additional feeds, like that from the Canadian Center for Cybersecurity. After-all you don’t really have depth if your threat information all comes from the same source. On average we add more than 100,000 net new malicious URLs to the block list every day, and we do it within 14 minutes of the first query anywhere on the global network.
Protecting over 1.8 million Canadians and counting. As a non-profit, we work closely with network operators in Canada, keep all data sovereign and private, and give-back through grant programs and helps to build Canada’s internet infrastructure.
Mike T.
Advanced user of CIRA DNS Firewall
★★★★★
Great value for an effective and simple security solution
What do you like best?
Simple set up and good security with no false positives so far. No need for any on prem systems and very quick to get it going. No real administration is required once it's set up. The daily reports include a csv so that you don't miss any activity that happens while away for the weekend for instance. The price is great particularly for cash strapped startups. The people at CIRA are very flexible on terms and provide excellent support and training. Multiple profiles available, content filtering.
What do you dislike?
No reporting (with the exception of daily reports) or view of history. A report of blocks for a period whether it's a week or a month would help to show management what's happening within the organization and that we're getting value for this service. Even if it was just a csv.
Recommendations to others considering the product:
It's a great way to add a layer of security and save budget for other security solutions. Having a log collector for your internal DNS will allow you to identify which systems attempted to go to malicious sites by search for URLs indicated on the DNS firewall console or in the daily reports.
What problems are you solving with the product? What benefits have you realized?
We've been building our security from the ground up and had no DNS security or visibility into whether or not any of our systems were trying to access C2s. Seeing C2 traffic would have indicated that we'd need to hunt internally for compromised systems. I've also realized that this is a simple, inexpensive and effective layer of security that will protect the entire company at this layer.
Review source: G2.com
