"classic" implementation using DNS forwarder (assuming static IP of Internet breakout)

DNS-over-https-/DoH-Agents for all common mobile platforms (Windows, Mac, iOS and Android)

Generic DoH-configuration for alternative implementation (e.g. Zero-Trust-Agents, Routers/ Firewalls – ifdynamic IP address available)

Rest-API interfaces for integration with other solutions (e.g. SIEM, NAC/NAP, …)