US Patent 11050792 Dynamic DNS policy enforcement based on endpoint security posture

A method performed by an endpoint connected to a network. The method includes computing a security score for the endpoint and providing the security score and a requested domain name to a domain name service (DNS) resolver using a DNS request. The endpoint obtains a DNS response including an Internet Protocol (IP) address resolved by the DNS resolver based on the security score and the requested domain name. The endpoint then accesses the IP address obtained from the DNS resolver.