# What cloud-based DNS security providers work well for a company with global offices that needs consistent policy enforcement without routing all traffic through one location?

<p class="elv-tracking-normal elv-text-default elv-font-figtree elv-text-base elv-leading-base elv-font-normal" elv="true">I've been mapping out which cloud-based DNS security providers actually hold up for a company with global offices that needs consistent policy enforcement without routing all traffic through one location. That last part is where a lot of setups fall apart, since backhauling every site to a central gateway adds latency and defeats the point of going cloud-native.</p><p class="elv-tracking-normal elv-text-default elv-font-figtree elv-text-base elv-leading-base elv-font-normal" elv="true">Going through the <a class="a a--md" elv="true" href="https://www.g2.com/categories/dns-security-solutions">DNS security solutions</a> category, the pattern in reviews from larger, distributed organizations is that anycast footprint and identical policy behavior on and off the network matter more than raw feature count. A few that came up repeatedly:</p><ul>
<li>
<a class="a a--md" elv="true" href="https://www.g2.com/products/cloudflare-application-security-and-performance/reviews"><strong>Cloudflare</strong></a>: Reviewers point to the global anycast network resolving at the edge closest to each user, so offices in different regions get low latency without hairpinning back to one location, with policies and analytics living in a single dashboard.</li>
<li>
<a class="a a--md" elv="true" href="https://www.g2.com/products/cisco-umbrella/reviews"><strong>Cisco Umbrella</strong></a>: Enterprise reviewers describe pointing each site's DNS forwarder at Umbrella's anycast IPs and getting a uniform security posture for users and workloads regardless of location, roaming clients included, with Talos threat intel behind the blocking.</li>
<li>
<a class="a a--md" elv="true" href="https://www.g2.com/products/dnsfilter/reviews"><strong>DNSFilter</strong></a>: Its roaming agent enforces the same policy on endpoints wherever they connect, which teams running distributed and remote fleets call out as the main draw, alongside consistent anycast performance even from far regions.</li>
<li>
<a class="a a--md" elv="true" href="https://www.g2.com/products/ibm-ns1-connect/reviews"><strong>IBM NS1 Connect</strong></a>: Shows up more on the managed DNS and traffic steering side, with a global anycast network and smart routing that reviewers say keeps resolution fast and consistent across regions. Worth a look if steering and uptime sit next to filtering on your list.</li>
</ul><p class="elv-tracking-normal elv-text-default elv-font-figtree elv-text-base elv-leading-base elv-font-normal" elv="true">For those running DNS security across multiple regions, how are you keeping policy consistent between offices and roaming laptops without centralizing the traffic? And has anycast resolution actually held latency down in your more remote sites?</p>

##### Post Metadata
- Posted at: 22 days ago
- Author title: Marketer
- Net upvotes: 1


## Comments
### Comment 1

The backhauling trap you describe is exactly what the anycast argument answers, and reviews back it up directionally: Cloudflare and Umbrella reviewers in distributed orgs describe pointing each site at the nearest edge with one policy set in one dashboard, no hairpinning. What reviews can&#39;t settle for you is your specific remote sites, since far-region latency depends on where a provider&#39;s nearest point of presence actually sits. Both publish network maps, so I&#39;d check your worst two offices against those maps before anything else. Roaming laptops are the easier half of this: the agents carry policy with the device, so consistency there is mostly a deployment question.

##### Comment Metadata
- Posted at: 18 days ago





## Related discussions
- [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team)
  - Posted at: about 13 years ago
  - Comments: 6
- [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section)
  - Posted at: about 13 years ago
  - Comments: 0
- [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm)
  - Posted at: about 13 years ago
  - Comments: 4