The reason traditional firewalls are inadequate against today’s threats is because they leave certain elements in your enterprise systems completely unprotected. Cyber criminals use the loopholes to infiltrate your network hence the need for another firewall. Use of dns firewall could help prevent these attacks.
In simple terms, a DDoS attack is when a flood of service requests are sent to a specific network, often obtained through a hole in DNS security or lack of dns protection, in order to bring that specific network offline for the duration of the attack. While these attacks are common and easy to execute, they are also preventable.