Work towards having holistic network security. This involves making sure as many pieces of the network as possible are secure – and try to get them working together by passing around threat information/events. Existing endpoint solutions and NGFWs already in place should be augmented with complementary security solutions. DNS plays a critical role in every network and has unique visibility over network traffic. Therefore, a purpose-built DNS security solution should be the first line of defense for any network to protect against today's wide range of attacks.