The updated Bi.Zone Secure DNS platform introduces a new 'Consolidation' feature, enabling hierarchical management of organizations and sub-entities. This functionality is designed for companies with distributed infrastructure and MSSP providers, allowing for centralized policy application across multiple child structures while supporting specific security exceptions.
The system now offers enhanced filtering capabilities, including the ability to block requests to newly registered domains and integrate with Roskomnadzor registries for IP and domain management. According to Dmitry Tsarev, head of cloud security solutions at Bi.Zone, analyzing domain age is critical for mitigating phishing and malicious campaigns.
Operational improvements include a detailed event log with grouping and sorting options, as well as support for SVCB records (RFC 9460) in Passive DNS. Administrators can now track user actions via a new audit log with CSV export functionality, and the interface provides a consolidated view of all user access permissions.
System reliability has been bolstered through optimized SQL queries, enhanced protection against injection attacks, and improved data caching. Additionally, the platform now features a password recovery mechanism for systems operating without an Identity Provider (IdP) integration.
