1. Once the SecureDNS service has been provisioned, the next system admin to log in will be presented with the setup wizard.



To complete the Setup Wizard, you will need to know the external (Internet-facing) IP addresses of your company's DNS servers. Your corporate network administrator can provide you with this information. You will need this information because the access controls on your SecureDNS service will only accept DNS traffic originating from your enrolled, external-facing DNS servers.


2. Once you have the external IP addresses of your DNS servers, you should name the service. We strongly recommend giving the DNS service a unique name. The default name is your license key, but as your usage becomes more sophisticated, you will want multiple services with different names for different purposes. Troubleshooting and support can be frustrating if all of your services have the same name or have unintelligible names.



3. Remember the list of DNS servers you got from your network administrator? You will now enter them, one at a time. 



Select “Save and Exit,” then when it refreshes, select “Continue.”


4. Now you are ready to subscribe to some lists. When first provisioned, your DNS service is already subscribed to a minimum standard group of ShadowNet IP and DNS lists.



Start with some definitions:

  • Lists can be Active or Paused. Active lists are deployed to, and actively used by, your shunning services. Paused lists are deployed to your shunning services, but are temporarily being bypassed.
  • Lists can be Subscribed or Available. Subscribed lists are the lists that are deployed to your shunning services (they may be Active or Paused). Available lists are optional lists that you may choose to deploy or not, depending on your corporate policies.
  • Lists can be IP or DNS. IP lists (not surprisingly) are lists of IP addresses and DNS lists are lists of domain names.


5. To continue with the Setup Wizard, click on the words “DNS Lists” just below the larger words “Subscribed Lists.” Repeat again under the larger words “Available Lists.” 



6. Clicking on any of the available lists will give you lots of details about that particular list. For example, here's the information you will see when you click on the words “Equatorial Africa DNS.” There is also a “Subscribe” check box next to each of your Shunning services that can use this list. Select the upper right corner “Back to DNS Lists.” 



7. Strangely, returning to DNS Lists only shows the “Available DNS Lists” with no option for IP list selection or viewing active subscriptions. Click on the word, “Services” in the upper left navigation panel. Then, click the “DNS Lists” tab as before. Now, you're back.



8. Click the plus sign logo on the “Active Malware DNS” line. In RAForce, all changes are recorded and logged for audit purposes. Enter a good reason for subscribing to this list. 



9. Click “Continue” and the setup wizard is complete. From now on, logging into RAForce and selecting “Services” from the left side menu will get you to this panel.