Service overview
CIRA (also known as Canadian Internet Registration Authority) DNS Firewall is one of the endpoint protection services that McGill uses to enhance cybersecurity and optimize network protection. When you use CIRA DNS Firewall, websites that contain malicious software or engage in phishing are blocked at the DNS layer. This means that no connection is established with the website or web application.
CIRA DNS Firewall offers several advantages that align with our security and operational requirements:
- Enhanced Threat Intelligence: CIRA DNS Firewall leverages Canadian threat intelligence sources and global cybersecurity partnerships to provide strong protection against malware, phishing, and ransomware threats.
- Privacy-Focused Protection: Unlike many global solutions, CIRA is committed to Canadian data privacy laws, ensuring compliance with strict data sovereignty regulations.
- Canadian Data Centers: All CIRA infrastructure is hosted in Canada, reducing latency and improving performance for users in the region.
By protecting against identity theft, security breaches, and data loss, endpoint protection software such as CIRA DNS Firewall helps minimize business risks, including network downtime and reduced productivity.
Keeping your endpoint protection program up to date significantly lowers the risk of malware infections while ensuring that any existing threats are detected and eliminated efficiently.
In 2025, McGill will replace Cisco Umbrella (for Windows laptops only) with CIRA DNS Firewall.
For LAN Administrators: Please ensure that all systems within your networks are protected from viruses by installing Microsoft Defender for Endpoint and CIRA DNS Firewall on McGill-funded computers.
In accordance with Section 8.5 of the Policy on the Responsible Use of IT Resources and the and the Workstation standards, all computers connected to McGill's network must run an IT Services-approved antivirus program, and IT Services may deny network access to any computer that is not running an antivirus program, or which is currently spreading a virus. Here are some of the advantages of using a McGill-provided antivirus solution on your computer:
- Automated virus definition updates.
- Antivirus, malware and spyware protection.
- Data theft prevention and other features.
- Access to technical support.
Who can use it
CIRA DNS Firewall is available for all users of McGill-funded Windows laptop computers.
How to request & access the service
If CIRA DNS Firewall has not been automatically pushed to your laptop computer, please contact your local LAN Administrator or the IT Service Desk.
Cost
There is no cost for this service.
Availability
CIRA DNS Firewall runs in the background and protects your computer even when outside of the McGill network.
Frequently asked questions
What will I see when a site is blocked?
When a site is blocked by CIRA DNS Firewall, you might see a block page that informs you that access to the site has been restricted. Here are some examples:
If you believe a site is blocked incorrectly by CIRA, please contact your local LAN Administrator or the IT Service Desk.
How does CIRA protect my computers and devices?
When you use CIRA DNS Firewall, websites that contain malicious software or engage in phishing are blocked at the DNS layer. This means that no connection is established with the website or web application.
Does this replace my other security software like antivirus or traditional firewall?
CIRA DNS Firewall is an addition to the end-point protection software. The end-point protection software is still the primary protection for security detection.
How do I know if CIRA DNS Firewall is installed on my machine?
You can find out by looking for either:
- CIRA DNS Firewall under Task Manager | Services on your laptop.
- The
icon in the tray at the bottom-right corner of your screen.
What should I do if I get the warning message that I have reached a potentially harmful site?
Close all browser windows after receiving this warning. If you believe a site is blocked incorrectly by CIRA, please contact your local LAN Administrator or the IT Service Desk.
What happens if I access a potentially harmful website or click on a malicious link while I am within the McGill network?
While within the McGill network, McGill’s built-in infrastructure blocks and protects access to malicious sites. CIRA DNS Firewall protects your laptop when you are outside of the McGill network.
Will CIRA DNS Firewall be installed on McGill desktop computers?
CIRA DNS Firewall will only be installed on laptops.
Please contact the IT Service Desk for more information.
Best practices & policies
For LAN Administrators:
- Install CIRA DNS Firewall on Windows laptop computers within your respective areas. If users experience any connectivity issues, or believe a site is blocked incorrectly by CIRA, please report them to the IT Service Desk.
- When performing large-scale deployments, it is advisable to break the installation process into smaller groups. Doing so will ensure computers are not left unprotected for a lengthy amount of time and will enable you to identify and resolve installation issues faster.
Additional references
Support
Contact the IT Service Desk