It actually prevents a lot of false alarms because if a link is blocked by antivirus, it creates an alert for the IT risk team to investigate. By not resolving the IP for a malicious link, it stops many issues before they escalate. This has improved our security posture significantly.
At this stage, we are struggling to use some of the DNS features of the platform, which are more about protecting your domain from hijacking and similar threats.
