For BloxOne Threat Defense Business Cloud and Advanced entitlements, BloxOne offers agentless support for DNS resolution over direct, encrypted DoH (DNS over HTTPS) and unencrypted DoT (DNS over TLS) protocols and unencrypted DNS resolution for customer-approved External Networks. You can eliminate the need for deploying BloxOne Endpoint or defining public subnets (External Networks), reducing the complexity of your network architecture. For information about External Networks, see Configuring External Networks.
...