There is a small confusion that we often need to clarify when talking to clients. Secfense User Access Security Broker does not overwrite DNS servers for client stations (or anything else), but only the A record for the application that Secfense is supposed to protect. If so far, e.g. the CRM application had an A record pointing directly to the web / application server, it should be changed to point to the Secfense broker. Then the users connecting to the CRM will transparently “pass” through the reverse-proxy server in the form of Secfense broker. Such solutions are widely used in both cloud-based anti-DDoS systems and in-house application firewalls.