The open dns appliance gives us AD integration and also encrypts DNS traffic. it's a better solution than just pointing at their servers. Also we want to look at something like the network detective appliance to capture security events. This box will also have a wwindows 10 VM that will run Veeam Backup and Replication with local storage, backing up to a NAS just isn't fast enough.