Question 1

How is the threat intelligence in Secure Internet Access created?

Accepted Answer

Secure Internet Access threat intelligence is built on data gathered from Akamai Connected Cloud, which manages up to 30% of global web traffic and delivers up to 11 trillion recursive DNS queries daily. This intelligence is enhanced with IP addresses and traffic logs from other Akamai security services and hundreds of external threat feeds — including WHOIS and registrar information — and the combined dataset is continuously analyzed and curated using advanced behavioral analysis techniques, machine learning, proprietary algorithms, and a team of data scientists and security threat researchers. As new threats are identified, malicious domains and URLs are immediately added to the Secure Internet Access Enterprise service, delivering real-time cybersecurity. In addition, domains and URLs that no longer represent a threat are removed from the list. This approach improves detection efficacy and reduces false positive security alerts. Our team also analyzes customers’ DNS logs looking for indicators of compromise (IOCs). If IOCs are found, affected customers are alerted through the Secure Internet Access portal, which is important to help reduce the potential impact of newly discovered threats.

Question 2

How often are Secure Internet Access threat lists updated?

Accepted Answer

The Secure Internet Access threat lists are updated approximately every 60 minutes; new domains are added, and domains that are no longer a risk are removed.

Question 3

Can I create different security policies for different regions or parts of my business?

Accepted Answer

Secure Internet Access has complete flexibility to allow businesses to customize how their security policies are structured. A policy can be built using locations, business units, and network subnets.

Question 4

How do I onboard recursive DNS traffic to Secure Internet Access?

Accepted Answer

There are multiple ways to onboard your traffic to Secure Internet Access, including a simple DNS server IP address change, deploying Akamai’s DNS proxy virtual machine, IPsec tunnels, lightweight clients, and integration with your SD-WAN devices. You can use a combination of traffic onboarding approaches to meet your use cases and the level of protection you need.

Question 5

Can I use Secure Internet Access as an additional layer of protection with my existing network firewall or secure web gateway?

Accepted Answer

Secure Internet Access can be deployed as an additional layer of proactive security, as network firewalls and secure web gateways typically do not inspect recursive DNS traffic. A DNS firewall works by checking every recursive DNS request that is made and comparing it against a frequently updated database of malicious domains. It lets you create and enforce cybersecurity and acceptable use policies (AUPs).

Question 6

How does a DNS firewall work?

Accepted Answer

The DNS protocol is an open protocol that can be easily abused. A normal recursive DNS resolver responds to every DNS request that is made, irrespective if the requested domain is malicious or benign. A DNS firewall works by redirecting every recursive DNS query to a cloud-based DNS resolver. Every DNS query is compared against a list of malicious domains that could deliver malware, ransomware, or a phishing landing page. When a malicious domain is identified, it is blocked and the user receives a block page. Recursive DNS queries for safe domains are resolved, a DNS response is sent back by the DNS resolver to the user’s device, and the request proceeds as normal.

Question 7

Is Secure Internet Access a DNS nameserver?

Accepted Answer

Secure Internet Access is a recursive DNS resolver that forwards DNS requests to DNS nameservers. However, Secure Internet Access caches recently requested domains, so will first attempt to resolve the DNS request from its cache, which improves performance. It only sends the request to the nameservers if the domain is not in the cache.

Question 8

How is the Secure Internet Access DNS infrastructure protected against DDoS attacks?

Accepted Answer

Akamai deploys its DDoS security service, Prolexic, to mitigate DDoS attacks, and uses its WAAP security service to add further protection for the DNS infrastructure. In addition, Akamai uses rate limiting and load balancing techniques to ensure that individual resolvers are not impacted by attacks.

Secure Internet Access Enterprise

Why buyers choose an enterprise secure internet access platform

How it works

Key features

Use cases and benefits

Improve overall security posture

Secure direct-to-internet branch traffic

Data center/IaaS visibility and protection

Proactively control guest Wi‑Fi content

IoT protection and agentless policy enforcement

SD‑WAN alignment and zero trust policy enforcement

FAQs

Get started