SSL scanning

SSL scanning is a method used to scan encrypted data for malware or confidential data that could lead to a piece of sensitive information being leaked to the wrong hands.

SSL is used to encrypt data for protection against malicious eavesdropping. However, the encrypted data can easily contain malware or information that is not meant to be shared outside an organization’s network (e.g., trade secrets or financial statements).

SSL scanners help protect organizations by decrypting the data sent by clients, scanning it for malware or confidential information, and re-encrypting it before sending it to the destination server.

DNSFilter is a DNS provider

DNSFilter does DNS lookups and blocks threats by scanning the DNS queries. DNSFilter does not have access to web traffic packets. Nothing can be done with them at this layer.

In the hierarchy of activities in a client/server communication, SSL inspection occurs at a layer above DNS resolution. In the act of resolving a DNS request, we do not have access to the network traffic/packets directly and can do no such inspection. 

We do not intend to spy on your web traffic while performing the DNS lookups. In fact, the very DNS lookup itself would be subject to the same deep packet inspection (DPI) as any other packet on the network, should you have it configured. 

Typically, this would be handled at a hardware firewall level, usually attached to an Intrusion Detection System (IDS).