With Artica’s RPZ Service capabilities, you gain the power of DNS-based filtering tightly integrated with your custom web-filtering categories, offering a unified, efficient approach to network security and content control.
This feature is available with Artica v4.50 Service Pack 2 or Artica v4.50 Service Pack1 Hotfix 20250302-21
Centralized Security for Any DNS Environment
Artica’s RPZ (Response Policy Zone) service unifies DNS-based security across BIND9, NSD, PowerDNS, Infoblox, Knot, and other DNS servers.
By maintaining a single repository of malicious domains, threat intelligence feeds, and custom filtering rules, you can deliver consistent policies to every resolver in your network—regardless of vendor or platform.
Artica’s RPZ Service allows you to:
- Leverage Existing Categories:
Use the categories you’ve already defined in Artica—whether created manually or synchronized from external sources—to produce RPZ rules. - Block or Redirect at the DNS Level:
Transform your categories into DNS-based policies that can block, redirect, or filter domains before they even resolve for client devices. - Maintain a Centralized Policy:
Keep your web filtering and DNS policies synchronized in one place, reducing administrative overhead and ensuring consistent enforcement across your network. - Enhance Security & Compliance:
By feeding your DNS server with updated RPZ files, you can quickly neutralize threats or apply domain-level restrictions to meet organizational requirements.
¶ Quick start
- You must first enable the RPZ service.
and set the default values. Once that’s done, you’ll be able to choose which categories will be made available to your DNS servers.
- Select categories to be transformed into RPZ data
All personal categories can be made available in RPZ mode, and these categories can influence the behavior of client DNS servers.
¶ Connect your DNS server to your RPZ service
DNS RPZ must be enabled on your DNS server, allowing you to subscribe to the desired DNS RPZ category.
This requires DNS service software that supports DNS RPZ and a tool capable of regularly downloading DNS RPZ category data from the RPZ service port.
¶ Without Artica DNS ( PowerDNS, Unbound, Bind…)
- Retreive RPZ databases for your DNS server
Allows external DNS resolvers or automated scripts to retrieve up-to-date RPZ (Response Policy Zone) databases
¶ With Artica DNS appliance:
If you use Artica DNS, these operations are directly supported.
- Link your Artica DNS Cache server to the RPZ service with categories service
Easily link your existing DNS cache to Artica’s RPZ (Response Policy Zone) Service, enabling a powerful, real-time way to filter and manage domain resolution