CIRA DNS Firewall

CIRA-ACEI

About this app

CIRA DNS Firewall helps organizations block malware, phishing, ransomware, and botnets at the DNS layer- before threats reach your devices. Built for today’s hybrid teams, it keeps protection consistent on Wi-Fi and cellular, on-network or off-network.

This application utilizes Android's VpnService to provide enhanced security and privacy features. The VpnService is employed to establish a local, secure connection on your device, enabling features such as network traffic filtering, ad-blocking, or firewall functionality. It does not route your traffic through remote VPN servers unless explicitly stated as part of a specific feature (e.g., for secure browsing or bypassing geo-restrictions). All traffic processing occurs locally on your device, ensuring your data remains private and secure.

Key capabilities

DNS-based threat protection: Prevent access to malicious domains in real time.

Web content filtering: Enforce acceptable-use policies with category controls.

Off-network protection: Security follows users wherever they work.

Block pages: Inform users when access is blocked (admin configurable).

Admin & deployment (via CIRA Hub)

Centralized policy management, users, and devices

Dashboards and reporting for visibility and compliance

SSO and API support; SIEM/SOAR integrations

Fast rollout at scale

Requirements

Active CIRA DNS Firewall subscription (business/education/government)

Device enrollment and policies managed by your organization’s administrator

For help, contact your administrator or CIRA support.

What’s new

Always-on VPN enforcement enabled to ensure DNS Firewall protection stays active and cannot be silently bypassed.
Improved reliability and consistency of protection state across network changes.