This month we implemented full support of DNS-over-HTTPS (DoH) in Mozilla Firefox. Google Chrome disables DoH by default. This means that DNSFilter fully supports DoH. Your filtering policies will continue to be in effect.
DNSFilter also supports DNS-over-TLS as a secure DNS mechanism. We believe it is better than DoH as it is more comprehensive. DoH only encrypts browser traffic. DNS-over-TLS encrypts all traffic.
For a longer discussion on this topic, checkout our blog post "What is DNS-over-HTTPS?"
We have officially released DNSSEC Support. You can utilize this by sending traffic to our Anycast IPs, ending in .9 (184.108.40.206 and 220.127.116.11)
However, DNSFilter only recommends utilization for organizations that understand the two challenges that the internet is facing with DNSSEC at this time:
Until the internet moves toward greater support of DNSSEC, we encourage people to use this feature only if they understand the inherent risks.
DNSFilter is on a mission to make it easy for organizations of all sizes to filter their users from online threats and inappropriate content. Last month we announced Roaming Clients. This month, we are announcing the DNSFilter Relay.
The Relay makes it easy for you to filter and report on all LAN devices. While our recent roaming clients are great for PCs & mobile devices, we realize that today's business networks often have Bring Your Own Device (BYOD) and IoT devices.
One of our most common requests comes from system administrators who want to audit their network traffic. Their question is “How do I know which machine is going where?”
The DNS Relay is a virtual appliance that reports and filters DNS traffic on your network. This gives you unparalleled visibility and control of the DNS activity of all network devices, including servers and IoT.
Our longstanding partnership with the Internet Watch Foundation has allowed us to prevent access to inappropriate content which promotes child abuse. Today, we are adding Project Arachnid, a similar organization in Canada which is committed to stopping child sexual abuse. Because we believe in child safety, both of these policies are enforced automatically for all customers.
As of today, DNSFilter users now have the most comprehensive SafeSearch on the market! We've added DuckDuckGo and SafeSearch to the list of providers. This means that you can enforce moderated content on these search engines. If you are an Education customer, this expands the search options that students can access - while still remaining CIPA compliant.
One of the biggest things you've asked for is to have DNSFilter's protection follow your users, whether they are in or out of the office.
Over the past several months, we've been working hard to produce versions of the DNSFilter roaming client that will work on every platform. Today this is a reality. Whether you use Windows, MacOS, ChromeOS, iOS, or Android - we have you covered.
You'll now be able to:
This week DNSFilter released two new features, one for education customers and another for Managed Services Providers.
The new MSP Dashboard gives you a single view for all your customers. This means that you can:
If you are an MSP but haven't joined our partner program yet, you can signup to be an MSP.
Being a teacher or school administrator is hard enough - even before government regulations. Let's make CIPA compliance easier. How about a single switch?
When you turn on CIPA compliance. DNSFilter automatically applies a filtering policy which blocks several categories and turns on SafeSearch and YouTube restricted mode. You can rest easy, knowing that your school is being protected by our filtering cloud.
Want to learn more? Check out our CIPA guide.