DNS server management

Set up authoritative and recursive DNS servers or enable DNS, DHCP, and IP address management (DDI) to effortlessly discover existing configurations for visualizing and managing advanced DNS settings, such as zones, domain records, named ACLs, advanced DNS configuration options, and Transaction Signature (TSIG) keys—all through a centralized console.

Monitor your DNS servers' network, IP, CPU, memory, and disk utilization from an intuitive dashboard to asses their load and performance.

DNS zone management

Leverage the zone editor tool to accurately map or update the zone data for the DNS records of a domain. Enhance administrators' understanding of the structure and relationships within a specific zone for smooth zone management.

Third party zone migrations

Manage your zones hosted with external cloud vendors such as Google Cloud DNS, Cloudflare, Microsoft Azure, and AWS Route 53 directly through DDI Central, bypassing the hassle of alternating between various management platforms. This centralized management facilitates streamlined migrations and bulk transfers, ensuring a smooth transition with minimal downtime.

DNS query and response analytics

Gain real-time insights into your network's DNS traffic to identify potential security threats, analyze and optimize zone performance, and proactively troubleshoot issues within your network.

Dynamic DNS (DDNS) with TSIG

Manage a responsive, scalable network by effortlessly adapting to dynamic IP changes in zone data with secure, automatic updates, guaranteeing uninterrupted services without extensive manual interventions.

DNS aging and scavenging

Streamline regular DNS maintenance by automating the timely identification and removal of stale records, ensuring a reliable, up-to-date DNS infrastructure.

DNS64

Enable smooth communication between IPv6-only clients and IPv4-only DNS servers by dynamically synthesizing and delivering AAAA records that combine a special IPv6 prefix with the original IPv4 resources, ensuring a cohesive, inclusive network environment.

DNS server management

Simplify DNS administration through a centralized console to discover existing configurations or set up new servers. Gain greater control and efficiency in handling DNS settings. Monitor server load and performance in real-time for enhanced oversight and responsiveness.

Zone management

Enhance organization and efficiency by managing DNS zones effectively, allowing you to configure and maintain DNS records mappings with ease and precision.

Zone Scopes

Optimize your DNS environment by defining zone scopes, enabling targeted DNS configurations for different network segments or purposes, enhancing overall DNS performance.

Dynamic DNS

Enhance network reliability and accessibility by automatically updating DNS records with IP changes, ensuring domain names always resolve to the correct and current IP.

Query resolution policy

Boost DNS security and performance by defining query resolution policies, controlling how queries are processed and enhancing overall query handling efficiency.

DNS firewall based domain blocking

Elevate network security by blocking access to malicious domains with DNS firewall policies, protecting your network from potential threats and unauthorized access.

Response rate limiting policies

Protect your DNS infrastructure from abuse and attacks by implementing response rate limiting policies, ensuring stable and secure query handling. Exempt trusted clients using RRL exception policies to maintain uninterrupted service for critical users.

DNS recursion

Automatically resolve external domain names by querying upstream servers, ensuring fast, efficient access to the internet while reducing your server's workload. Perfect for optimizing network performance with minimal configuration.

DNS forwarders

Enhance network efficiency by directing DNS queries to specific external servers, reducing response times and offloading traffic from your primary DNS server. Ideal for optimizing and accelerating DNS resolution across diverse network environments.

DNSSEC with TSIG

Mitigate the risk of cache poisoning and manipulator-in-the-middle attacks by validating DNS responses through cryptographic signature verification, ensuring that end users receive only accurate, trustworthy DNS resources.

Response Rate Limiting (RRL)

Protect your authoritative name servers by intelligently regulating response throttling to mitigate the impact of DNS amplification attacks, ensuring uninterrupted access for legitimate clients and upholding a well-balanced approach to security.

Domain views

Customize DNS resolution, enforce distinct security policies, and control access for different user groups and network segments within your organization, enhancing protection against potential threats.

Domain blocking

Boost security by prohibiting access to recognized collections of undesirable domains and customize redirection using personalized IP settings.

DNS Firewall Response Policy Zones (DFW) (RPZ)

Block malware communications by enforcing DNS Firewall policies through Response Policy Zones (RPZs), implementing a proactive security measure at the DNS level to prevent the resolution of recognized malicious domains.

DHCP server management

Set up DHCP servers manually or discover configurations from your existing DHCP environment, including DHCP scope configurations, DHCP options, and DHCP failover setups for your IPv4 address space. Monitor DHCP servers' network, IP, CPU, memory, and disk utilization from an intuitive dashboard to asses their load and performance.

DHCP scope management

Automate IP lease management by defining address pools within hierarchically organized DHCP scopes or network topology elements.

Apply custom configurations across multiple declared IP pools within each topology, incorporating advanced DHCP options for granular control.

Reserve fixed addresses for specific hosts, managing them collectively as host groups. Streamline VLAN management with isolated DHCP scopes for VLANs and exclusive broadcast domains.

Static subnet and lease management

Simplify IP management for critical devices requiring fixed IP addresses by managing static leases and subnets. Create custom fields and directly import static leases from spreadsheets into designated fields without setting up static subnets.

DHCP fingerprinting

Customize IP resource allocation by granularly identifying, categorizing, and controlling the various types of devices connecting to your network.

Provide targeted configurations, enforce tailored compliance policies and access privileges, and streamline troubleshooting based on the device's type, OS, and manufacturer.

Pre-boot execution environments

Create and clone templates to enable devices to autonomously acquire IP addresses, initiate boot processes, and seamlessly integrate into your network.

Rogue DHCP server detection

Quickly identify and isolate rogue DHCP servers with timely email alerts, leveraging real-time monitoring and automated IP inventory reconciliation to ensure a secure, compliant network environment.

DHCP server management

Simplify DHCP server management with an unified console to discover existing configurations or set up new servers for greater efficiency and ease in handling DHCP settings and configurations. Real-time monitoring of server load and performance enhances continuous visibility into server health ensuring your network runs smoothly and reliably.

Policy based assignment

Optimize your network by customizing IP address allocation based on policies, ensuring the right devices receive the right IPs, enhancing both efficiency and security.

DHCP scope management

Simplify your IP management with centralized and granular control over multiple scopes, making configuration, monitoring, and troubleshooting more efficient, especially in large or segmented networks.

DHCP reservations

Ensure stability and ease of access by guaranteeing specific devices always receive the same IP address, essential for printers, servers, and other critical devices.

DHCP MAC filtering

Elevate network security by controlling access with MAC address filtering, allowing or denying devices based on their MAC addresses to prevent unauthorized network access.

Vendor and user classes

Optimize network performance by assigning IPs and configuring options based on device type or user group, accommodating specific needs and improving overall efficiency.

DHCP failover

Minimize network downtime by ensuring high availability and reliability with DHCP failover, automatically switching to a secondary server if the primary one fails.

Network IP address space insights

Gain comprehensive visibility into IP address utilization and availability across diverse networks and VLANs within your organization.

Analyze the patterns of IP distribution among various hardware vendors and take control by directly allocating fixed addresses for hosts, ensuring precise management of IP resources.

IP-MAC identity mapping

Access user information related to the network and end-host devices and analyze users' consumption of IP resources.

Streamline change management and swiftly mitigate and troubleshoot network issues by following a user-centric approach.

Lease history insights

Probe the audit trail of current IP assignments in your network to access the DNS mapping and query analytics for a specific IP.

Track and analyze an IP's transitions over time to identify its association with specific devices, aiding in efficient troubleshooting and ensuring compliance.

Role-based access controls

Elevate security with precise permissions tailored to individual roles, ensuring efficient, secure access management for DDI clusters.

Scheduled DNS and DHCP objects

Set up schedules to create or modify DHCP scopes and DNS records, enabling network administrators to plan and rollout network configurations at predetermined times for maintaining uninterrupted network services outside of regular business hours.

Scheduled reports

Set up scheduled reports for DHCP subnets specifically for administrators to provide an analytical visual snapshot of subnet capacity. This aids in advanced capacity planning and monitoring IP utilization thresholds over time. Additionally, the scheduled reports on DNS zones offer periodic updates on domain queries, helping admins to understand traffic patterns, as well as user behavior and preferences.

Contact groups

Organize and manage contacts for streamlined communication within each DDI cluster. Ensure that critical messages reach the right users promptly, enhancing overall responsiveness and coordination.

SMTP servers

Ensure timely communication with your users through swift email notifications and reports by configuring an SMTP server with specified authentication settings.

SAML authentication

Simplify the login process with centralized authentication policies from identity providers like Okta, Ping, Onelogin, and Microsoft Azure through SAML (Security Assertion Markup Language) authentication.

LDAP authentication

Centralize user authentication, easily manage user accounts, and enforce security policies across your distributed Microsoft network infrastructure using LDAP (Lightweight Directory Access Protocol) and LDAPS (LDAP over SSL) as a Single Sign-On (SSO) solution to authenticate users against a centralized directory, such as Active Directory.

Two-factor authentication

Add an extra layer of security to your accounts by coupling traditional usernames and passwords, or LDAP credentials, with time-sensitive codes from any TOTP-enabled authenticator mobile apps, such as Google Authenticator, Zoho's OneAuth, Authy, and more.