Role-based policy DNS response for network security user notifications

1. A method comprising:

storing, at a Domain Name System (DNS) device, data indicative of a role associated with a user device and data indicative of a policy setting a level of access of the user device to a responding device, wherein the data indicative of the role associated with the user device indicates a security level for the user device within an enterprise network environment;

obtaining, from the user device at the DNS device, a request for an Internet Protocol (IP) address of the responding device;

determining, at the DNS device based upon the request and the data indicative of the role associated with the user device, that the policy applies to the request; and

applying the policy in response to the determining, wherein applying the policy comprises providing, to the user device, data indicative of an IP address of a notification server to redirect the user device from the responding device to the notification server to provide the user device with an indication of the applying the policy by the DNS device.

2. The method of claim 1 , wherein the role associated with the user device is based upon a role associated with a user of the user device.

3. The method of claim 1 , wherein the policy sets the level of access of the user device to the responding device based upon the role associated with the user device.

4. The method of claim 1 , wherein applying the policy comprises denying the user device access to the responding device.

5. The method of claim 1 , further comprising obtaining, at the DNS device, the data indicative of the role associated with the user device from a policy server.

6. The method of claim 1 , wherein the policy comprises an enterprise policy.

7. An apparatus comprising:

one or more memories;

one or more network interfaces; and

one or more processors configured to perform operations on behalf of a Domain Name System (DNS) device such that the one or more processors are configured to:

store, in the one or more memories, data indicative of a role associated with a user device and data indicative of a policy setting a level of access of the user device to a responding device, wherein the data indicative of the role associated with the user device indicates a security level for the user device within an enterprise network environment;

obtain, via the one or more network interfaces from the user device, a request for an Internet Protocol (IP) address of the responding device;

determine, based upon the request and the data indicative of the role associated with the user device, that the policy applies to the request; and

apply the policy in response to determining that the policy applies to the request, by providing, to the user device, data indicative of an IP address of a notification server to redirect the user device from the responding device to the notification server to provide the user device with an indication of application of the policy by the DNS device.

8. The apparatus of claim 7 , wherein the role associated with the user device is based upon a role associated with a user of the user device.

9. The apparatus of claim 7 , wherein the policy sets the level of access of the user device to the responding device based upon the role associated with the user device.

10. One or more tangible non-transitory computer-readable mediums encoded with instructions, wherein the instructions, when executed by one or more processors, cause the one or more processors to:

store, at a Domain Name System (DNS) device, data indicative of a role associated with a user device and data indicative of a policy setting a level of access of the user device to a responding device, wherein the data indicative of the role associated with the user device indicates a security level for the user device within an enterprise network environment;

obtain, from the user device at the DNS device, a request for an Internet Protocol (IP) address of the responding device;

determine, at the DNS device based upon the request and the data indicative of the role associated with the user device, that the policy applies to the request; and

apply the policy in response to determining that the policy applies to the request by providing, to the user device, data indicative of an IP address of a notification server to redirect the user device from the responding device to the notification server to provide the user device with an indication of application of the policy by the DNS device.

11. The one or more tangible non-transitory computer-readable mediums of claim 10 , wherein the role associated with the user device is based upon a role associated with a user of the user device.

12. The one or more tangible non-transitory computer-readable mediums of claim 10 , wherein the policy sets the level of access of the user device to the responding device based upon the role associated with the user device.

13. The apparatus of claim 7 , wherein the one or more processors are configured to apply the policy by denying the user device access to the responding device.

14. The apparatus of claim 7 , wherein the one or more processors are configured to obtain the data indicative of the role associated with the user device from a policy server.

15. The one or more tangible non-transitory computer-readable mediums of claim 10 , wherein the instructions that apply the policy deny the user device access to the responding device.

16. The one or more tangible non-transitory computer-readable mediums of claim 10 , wherein the instructions cause the DNS device to obtain the data indicative of the role associated with the user device from a policy server.

17. The apparatus of claim 7 , wherein the policy comprises an enterprise policy.

18. The method of claim 1 , wherein the data indicative of the role associated with the user device comprises a security group tag.

19. The apparatus of claim 7 , wherein the data indicative of the role associated with the user device comprises a security group tag.

20. The one or more tangible non-transitory computer-readable mediums of claim 10 , wherein the data indicative of the role associated with the user device comprises a security group tag.