Netskope DNS profiles allow you to restrict domain-filtering policies to specific DNS record types rather than applying actions to all queries indiscriminately. This reference lists the standard, query, and DNSSEC record types supported in Domain Allowlists and Blocklists.
| Record Type | Purpose |
|---|---|
| A | Maps a hostname to an IPv4 address. |
| AAAA | Maps a hostname to an IPv6 address. |
| CNAME | Makes one hostname an alias of another. |
| MX | Specifies mail servers, with priority. |
| ANY | ANY is a query type, not a stored resource-record type. It requests records for a name, but servers may return only a minimal response, not every available record. |
| HTTPS | Advertises HTTPS Service connection parameters. |
| LOC | Stores geographic locations. |
| NULL | Carries arbitrary binary data. |
| NS | Identifies authoritative nameservers for a zone. |
| SOA | Contains zone metadata. |
| PTR | Maps an IP address back to a hostname. |
| TXT | Stores text data. |
| SRV | Locates a service using priority, weight, port, and target. |
| CERT | Stores certificates or related authentication material. |
| DNSKEY | Publishes public keys used to validate DNSSEC signatures. |
| DS | Links a child zone’s key to its parent, establishing the chain of trust. |
| RRSIG | Contains a digital signature over a resource-record set. |
| NSEC | Provides authenticated proof that a name or record type does not exist. |
| NSEC3 | Provides authenticated denial of existence using hashed names. |