Client device security for domain name resolution and browsing

A system comprising a server including at least one processor and memory with instructions that when executed by the at least one processor cause the system to perform actions including:

• receiving, by a first security component from a second security component executing on a first device, a domain name resolution (DNS) query initiated by a client device for a resolution of a domain name, and the DNS query also including authentication information about the client device;
• determining, by the first security component using the DNS query authentication information, whether the second security component is authorized to access a domain resolution service performed by the first security component;
• and
• in response to a determination that the second security component is authorized to access the domain resolution service, the first security component performing the domain resolution service by:
• resolving the domain name included in the DNS query to obtain a first internet protocol (IP) address associated with the domain name;
• initiating retrieval of classification data from a third-party service that is associated with the domain name or the first IP address;
• evaluating retrieved classification data associated with the domain name or the first IP address against a first policy associated with the client device;
• when the evaluation results in a determination that the client device is not allowed to access the IP address, sending to the client device a first DNS response including a second IP address that does not lead to the first IP address or a code indicating that the client device will not receive an IP address;
• and
• when the evaluation results in a determination that the client device is allowed to access the IP address, or does not provide a determination of whether the client device is or is not allowed to access the IP address, sending to the client device a second DNS response including the IP address and the retrieved classification data.

A non-transitory computer-readable medium comprising instructions that when executed by a processor of a server cause the server to perform actions including:

• receiving, by a first security component from a second security component executing on a first device, a domain name resolution (DNS) query initiated by a client device for a resolution of a domain name, and the DNS query also including authentication information about the client device;
• determining, by the first security component using the DNS query authentication information, whether the second security component is authorized to access a domain resolution service performed by the first security component;
• and
• in response to a determination that the second security component is authorized to access the domain resolution service, the first security component performing the domain resolution service by:
• resolving the domain name included in the DNS query to obtain a first internet protocol (IP) address associated with the domain name;
• initiating retrieval of classification data from a third-party service that is associated with the domain name or the first IP address;
• evaluating retrieved classification data associated with the domain name or the first IP address against a first policy associated with the client device;
• when the evaluation results in a determination that the client device is not allowed to access the IP address, sending to the client device a first DNS response including a second IP address that does not lead to the first IP address or a code indicating that the client device will not receive an IP address;
• and
• when the evaluation results in a determination that the client device is allowed to access the IP address, or does not provide a determination of whether the client device is or is not allowed to access the IP address, sending to the client device a second DNS response including the IP address and the retrieved classification data.