See more
…y approaches you can follow to block DNS tunneling, which one to choose will depend on your current deployment:
…commonly available & I have dealt with these before so just mentioning the ones that I can remember right now.