Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=DNS-protection-installers

Installers

The Installers page provides you with the IP addresses and certificates you need to configure your network to use DNS Protection.

Network configuration

You must configure your DNS server to use DNS Protection. To do this, you need the DNS Protection IP addresses. The Installers page shows two IP addresses. You can use them as the primary and secondary DNS Protection IP addresses to configure redundancy.

Click Copy next to IP addresses to copy the DNS Protection IP addresses.

For details about how to configure your DNS server, see Set up your network.

Get the root certificate

For domains you've blocked, block pages show a message (HTTPS response) explaining why these domains are blocked. To ensure your users see these block pages, you must install the DNS Protection root certificate in users' devices.

Click Certificate to download the DNS Protection root certificate.

For details about how to install the DNS Protection root certificate in users' browsers, see Set up your network.

Check your configuration

You can check your DNS Protection configuration as follows:

  1. Click Copy next to URL.

  2. In a web browser, type the URL you copied.

    If you see the welcome message, you've configured DNS Protection correctly.