Phishing has not gone away because the payload changed — it works because people click links. The most reliable defence is not asking staff to spot every fake; it is making sure the dangerous ones never load in the first place.
The path a bad link takes
A user clicks. The browser asks DNS to resolve the domain, opens a connection, and downloads a page or a file. There are three points on that path where a UTM firewall can intervene — and each one it catches is a click that never became an incident.
- At DNS. Known-malicious and newly-registered domains are refused before the connection is even attempted.
- At the web gateway. Category and reputation filtering blocks phishing, malware-hosting and command-and-control sites.
- At the file layer. Gateway antivirus scans anything the page tries to download before it lands on the device.
“You cannot train your way to zero clicks. You can make the click harmless by stopping the link from ever resolving.”
Why layered beats any single control
No single filter is perfect — a brand-new phishing domain may not be categorised yet. Layering DNS, web and file inspection means a threat that slips one layer is caught by the next, and the gap between “registered” and “blocked” keeps shrinking as reputation feeds update.
Reputation feeds do the heavy lifting
The value of filtering is the feed behind it. Current threat intelligence is what lets the firewall block a domain that only went live this morning — which is exactly when phishing campaigns are most active.
Key takeaways
- Stop dangerous links at resolution, not at the point of clicking.
- DNS, web-gateway and file scanning each catch what the others miss.
- Current reputation feeds are what block same-day phishing domains.
- Filtering reduces reliance on every user spotting every fake.
Where a managed plan fits
A managed firewall keeps the filtering categories, reputation feeds and gateway antivirus current, and reviews what was blocked — so a wave of phishing shows up as blocked entries in a report, not tickets on Monday morning. See what the managed plan covers.
All guides