Skip to main content

SecureDNS Agent User Guide

  • Updated

1 Introduction

The SecureDNS Agent is a robust tool developed to enhance DNS security for devices outside the SecureDNS-protected network.

This manual provides a comprehensive guide for users, administrators, and IT professionals on installing, configuring, and using the client software.

 

1.1 Prerequisites

Once we have received the information on how many agents are needed, we will provide
you with a download and a license key.

  • Make sure you are able to log in to https://portal.secutec.com to download the
    agent. The installation folder is located at Documents -> Configuration.

1.1.1 System requirements

Type Description
Disk Space 150 MB (50 MB for program data, 100 MB for program logs)
Operating System 

All 64-bit platforms

  • Microsoft Windows 10 or later 
  • macOS

  • Linux 'systemd' distributions (e.g. Ubuntu, Linux Mint)
Memory Requirements 50 MB of free memory
Localhost Network
  • Port 53 must be available (TCP & UDP)
  • Ability to open and connect to port 37862 (TCP)
Windows Installation Directories
  • C:\Program Files\DNSAgent\DNSClient\dnsproxy.exe
  • C:\Program Files\DNSAgent\DNSClient\dnsclient.exe
Network & Firewall Requirements
  • Clients must be able to access https://*resolve.secure-dns.eu. The SecureDNS agent will refresh its configuration every 10 minutes, provided the API servers are reachable.
  • Ability to open a TCP connection to 94.140.185.166:80. If the connection is absent, a no Internet connection status will be shown in the system tray.
Software installation

Installation requires administrative privileges and a company key.

The company key is provided to you through email or the portal. 

2 Downloading the installer

To obtain the installer folder, please download it from the Secutec portal under Documents. Here You can Install the SecureDNS Agent by clicking on the eye icon on the right side

3 Installation

3.1 Microsoft Windows

3.1.1 Installation Parameters

Parameter Description Format & Recommendations
COMPANYID Stores your unique company key, which is required to install and run the software. COMPANYID=x-y-z. Use this parameter for new installations.
USE_OLD_CONFIG (yes/no) Determines whether or not to keep the configuration from a previous agent installation.

USE_OLD_CONFIG=yes/no. Specify yes to keep the previous configuration, no to overwrite it. E.g. If your company key is still the same, choose yes 

3.1.2 Installation Wizzard

  1. Log in with a user account that has administrative privileges.
  2. Navigate to the folder where you downloaded the SecureDNS agent installer.
  3. Double-click on the msi installer and follow the on-screen instructions. When prompted, copy and paste your company key into the Company ID field.dns_agent_win_installation.png
  4. After completing the installation, a green or blue icon will appear in the system tray. This means that your device is protected. Refer to the SecureDNS Agent Status section for additional information.
    dns_agent_win_systray.png

3.1.3 Windows Command Line

  1. Open the Windows Start menu and type cmd.exe.
  2. Next, right-click on cmd.exe from the programs list, then click on run as administrator.
  3. Go to the folder where you downloaded the installer, e.g. 'cd Downloads'.
  4. Enter the following command, providing the correct COMPANYID value.
msiexec.exe /q /i dnsagent_win64_x.y.z.msi COMPANYID=xyz

After completing the installation, a green or blue icon will appear in the system tray. This means that your device is protected. Refer to the SecureDNS Agent Status section for additional information.

dns_agent_win_systray.png

3.1.4 Other Installation Methods

The SecureDNS agent can be installed via a Group Policy Object or Microsoft Intune, using the following command line argument: COMPANYID=x-y-z. Substitute x-y-z with your company key.

For comprehensive guidance on these automated deployment options, please refer to the relevant Microsoft documentation.

 

3.2 Linux

  1. Log in to your Linux machine.
  2. Start a terminal and find the folder where you downloaded the SecureDNS agent installer. 
    1. cd Downloads
  3. Change the installer's default permissions. 
    1. chmod +x dnsagent_lin64_x.y.z
  4. Start the installation and follow the on-screen instructions. 
    1. sudo ./dnsagent_lin64_x.y.z
  5. When prompted, copy and paste your company key into the Company ID field.dns_agent_linux_installation.png

  6. After completing the installation, a green or blue icon will appear in the system tray. This means that your device is protected. Refer to the SecureDNS Agent Status section for additional information.
    dns_agent_linux_systray.png

3.3 macOS

  1. Double-click the DMG file to extract the installer.
  2. Once the installer is extracted, click on it to start the installation. When prompted, copy and paste your company key into the Company ID field.
  3. After completing the installation, a green or blue icon will appear in the system tray. This means that your device is protected. Refer to the SecureDNS Agent Status section for additional information.

4 SecureDNS Agent Status

In this section, we explain the meaning of various icons that may appear in the system tray.

Icon Description
agent_blue.png Home
Agent is in bypass mode.
The agent is not active because the network is already protected by
SecureDNS.
agent_green.png Running
Agent is active.
The agent established an active connection with our environment
because the network was not protected by SecureDNS.
agent_disabled.png Timeout
The agent was disabled manually.
agent_red.png Error
Error with agent.
Multiple possibilities, check status or logs for more details.
Example: No network connectivity, Maximum of licenses reached, …

 

5 Testing the Agent 

You can test the agent by using the nslookup or the dig command. Use one of the following Fully Qualified Domain Names (FQDNs) to evaluate your configuration.

FQDN Category
test.sinkhole.secure-dns.eu Test
blacklist.secutec.be Blacklist
malware.secutec.be Malware
spam.secutec.be Spam

 

 

6 Uninstalling the Agent

To uninstall the SecureDNS agent, run the installer, select Uninstall DNS Agent and follow the on-screen instructions. This procedure is the same for all operating systems.dns_agent_uninstall.png

 

7 Changing your Company ID

If the Company ID needs updating, run the installer, select Change Company Key, and follow the on-screen instructions. This procedure is consistent across all operating systems.

 

8 SecureDNS Agent Logs

The SecureDNS client-side logs serve as a valuable resource, providing detailed insights into DNS activity on individual devices and the status of the DNS agent itself.

The logs capture information such as queried domains and API response codes, offering administrators a comprehensive view of the DNS transactions and a method for troubleshooting.

To view the logs, simply click on the tray icon and select Open logs.

secure_dns_agent_logs.png

 

9 Additional information

Executables

C:\Program Files\DNSAgent\DNSClient\dnsclient.exe
C:\Program Files\DNSAgent\DNSClient\dnsproxy.exe

Registry

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\SECUREDNS\DNSClient

Related articles