For BloxOne Threat Defense Business Cloud and Advanced entitlements, BloxOne offers agentless support for DNS resolution over direct, encrypted DoH (DNS over HTTPS) and unencrypted DNS or DOT for customer-approved external networks. You can eliminate the need for deploying BloxOne Endpoint or defining public subnets (External Networks), reducing the complexity of your network architecture. For information about External Networks, see Configuring External Networks.
You can also use this feature to integrate a variety of security solutions, such as Secure Service Edge (SSE), web proxy, VPN, and others, with BloxOne Threat Defense to support a robust and comprehensive security posture.
For information on implementing DoH on specific clients, see the following: