SWITCH has introduced a service based on DNS Response Policy Zone in the Swiss NREN. DNS RPZ extends the DNS with a firewall function that denies access to malicious domains. With this function, malware infection on users' devices and requests for phishing sites will be prevented. In addition, already infected systems can be detected. Furthermore the user’s awareness is increased through redirecting the user to an information page.