---
title: "On-Prem DNS Firewall Service"
canonical: "https://docs.infoblox.com/space/BloxOneThreatDefense/35434784/On-Prem%20DNS%20Firewall%20Service"
format: markdown
---
Infoblox On-Prem DNS Firewall employs DNS RPZs (Response Policy Zones), a technology developed by Internet System Consortium. DNS RPZs enable reputable sources to dynamically communicate domain name reputation, and this helps you implement policy controls for DNS lookups.

> ⚠️ The **Data Exfiltration**, **Malware**, **Command & Control**, and **Summary** reports are not tied to your organization's custom allow list and should not be reported as RPZ events. Thus, they report threats detected by threat intelligence and exist independently of the DNS Firewall. If your DNS threat policy is set to "**log**,** allow**," these reports will continue to show up. To remedy this when interpreting DNS Firewall activity, use only the **Security Report**.

To access Infoblox On-Prem DNS Firewall, log into the Infoblox Platform and go to **Security** > **Configuration** > **On-prem Firewall**. On the *On-Prem DNS Firewall* page, follow the four-step process to set up your on-prem firewall service. 

  
For information about the On-Prem DNS Firewall Service, see the following:

- *[Configuring On-Prem DNS Firewall Service](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneThreatDefense/pages/356614212)*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneThreatDefense/pages/356614212)
- *[Enabling and Scaling of Custom RPZ Feeds](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneThreatDefense/pages/35402500)*
- *[Selecting a TSIG Key Format](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneThreatDefense/pages/35402519)*
- *[Sizing Guidelines for Trinzic Appliances](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneThreatDefense/pages/35434905)*
- 

If your network infrastructure consists of On-Prem Infoblox appliances, you can set up the DNS Firewall service on these appliances to provide protection through RPZs. For more information about Infoblox DNS Firewall, refer to the <span style="color: #0000ff">*[Infoblox NIOS Administrator Guide](https://docs.infoblox.com/space/nios90/154608627/Infoblox+NIOS+9.0)*</span><span style="color: #008080"> </span>(NIOS 9.0).