Cisco umbrella is a promising DNS proxy. It relays trustworthiness of different web site and does not respond to user requests for malicious, known malicious, associate malicious, and zero-day exploits. Remember this has the backing of Cisco talos security operations center giving our up-to-date telemetry data and instantly updating the Cisco umbrella product with web site reputation. Now as the administrator you can choose to tune this to only blocks known malicious websites, or you can tune it to extremely paranoid or any web site remotely associated with a known malicious web site will be blocked. Do a little research online. Does this sound like a good solution? What sort of logging functionality can it supply you with? Would you just block malicious web sites, or would you set it to super paranoid? Are there any other DNS proxies that could fill this need? Do you think this is a security function that needs to be filled in your business environment?