Our Products

Every day we intercept thousands of cyber threats & prevent next-generation attacks

DoHzel Proxy

Hafnova DoHzel protects your networks, your users and your data

DOHzel Proxy secures your infrastructure and networks with:

End-to-end DNS encryption with DOH/DOT (on-premise only),
Blocking DNS queries to malicious Web sites,
Flexible security policies filtering selected traffic content (pre-defined and custom categories),
A performance improvement up to 60%,
Real-time update of protection agents on mobile devices (laptops, smartphones and tablets),
Autonomous Detection, Blocking and Reporting security incidents to security staff, monitoring systems and other security solutions such as security operation centers (SOC),
Compliance to data privacy regulations such as GDPR and Swiss Federal Act on Data Protection.

DOHzel Proxy can be installed on a single machine (computer, virtual machine or network appliance, also Raspberry Pi) or made available as SaaS solution.

Manage populations of users with different needs

Whether you need to manage different populations of users (e.g. on-site workers, remote workers or even field forces), DoHzel enables administrators to define profiles with specific security policies, adapted to each population.

By using profiles so, security can be applied on a risk-based approach for each population of users, while managing users’ expectations.

This enables organizations to enforce a tailored security and facilitates compliance to laws and regulations.

Thanks to its intuitive design, DoHzel Console can be easily managed by non-technical people.

Manage fleets of mobile devices in one piece

DoHzel enables the management of different populations of users and apply specific security policies to each one.

Whether you need to manage on-site workers, mobile workers working remotely or even field forces, DoHzel enables administrators to enforce corporate compliance everywhere.

For each population, define a profile with tailored security policies, and enroll seamlessly devices into DoHzel Console with:

Managed devices, for corporate devices: managed by an administrator,
Freedom devices, for private devices, fully managed by the end-user
BYoD devices, in which only a reduced set of policies are enforced by the organization, the other ones remaining under the end-user’s control.

Enforce an adapted

Because all populations of users do have different needs, security cannot be applied with the same rules for all.

Maybe professional drivers should not be allowed to watch TV while underway, or maybe on-site workers should not be gambling while in the office?
With DoHzel, you can easily select the policies to be applied for each population, according to its profile. Examples of pre-defined security policies include:

Advertising
Tracking, to protect your privacy
Adult content
Gambling sites
Free proxies and VPN, to prevent data leakage
Messenging services
Etc.

Policies which are not available yet can also be developed to answer specific needs, thanks to our algorithms crawling the Internet, constantly categorizing online content.

Finally, exceptions to the applied security policies can also be easily managed by administrators or Freedom users with a blocklist and an allowlist.

Understand your network

DoHzel Console gathers all user activities online, by saving their DNS queries.

The log management panel enables administrators to analyze the network traffic under various standpoints:

At profile level, to better understand your network traffic
At device level, to troubleshoot configurations

This facilitates network management, troubleshooting, as well as supporting the investigation and resolution of security incidents.

Sanitize your network and improve performance

DoHzel Console provides a comprehensive overview of all traffic flowing within your networks.

DoHzel statistics show all the traffic blocked by security policies currently applied.

Applying policies to remove ads and trackers can remove up to 50% of network traffic, which is only pollution, a threat to privacy and degrading the overall network performance.