How Obsolix Works

Obsolix has two components: an Edge running at every site, and a Central that manages all sites from one place. All analysis takes place inside your organization.

Edge

Runs in front of the organization's DNS server at every site, forwarding, blocking or quarantining each query within milliseconds according to threat and policy rules. It keeps making decisions even if the internet goes down.

Central

Logs from every edge are collected in one place, where the AI model and organization-wide risk analyses are produced. Reports are prepared and exported to your SIEM.

ARCHITECTURE

Architecture Diagram

Your network

Clients

DNS queries from users and devices

Edge

Decision on site: forward, block, quarantine

Central

Logs, AI, risk analysis

SIEM / Reports

CEF / LEEF / Syslog, Excel, PDF

Queries are evaluated at the Edge, logs are collected at the Central, and results flow to your SIEM and reports. The entire flow stays inside your network.

Secure Connection

The Edge connects to the Central over a one-way encrypted connection; the Central never opens a connection toward a branch. Policy changes are distributed as signed packages, and during outages logs wait locally and are delivered without loss.

Deployment

Installed on Kubernetes with ready-made profiles from small to large. An offline installation package covers environments with no internet connection.

See the architecture in your own environment

Let's define the right deployment profile together.