If you are looking for inexpensive DNS-based content filtering, then you really should take a look at dnsfilter.com. It's dirt cheap, and incredibly effective. It does not have near the feature set that Umbrella does, and there is no comparison between the 2 products, but for what it is, it's fantastic.
I found links in your comment that were not hyperlinked:
I did the honors for you.
^delete ^| ^information ^| ^<3
Thanks for the mentioning us!
This is something you could easily do with DNSFilter. All you have to do is select every category to be blocked. I've linked to the relevant docs page that talks about it -> https://docs.dnsfilter.com/docs/whitelist-only-policy
We - DNSFilter are a new entrant into the market. We're US-Based, (SafeDNS is in Russia), and we're a simpler pricing model than opendns: we're usage-based.
Right now our feature-set is geared towards BYOD networks, but we're rapidly developing features.
We have better domain coverage than opendns or safedns, and have an option to auto-categorize new websites on the fly if a user tries to visit a site we haven't seen before.
We're releasing a revamped sales site later today.
Hey guys - in full disclosure, I am a Founder of DNSFilter. Feel free to take a look at our service and sign up for the free trial. Myself and my co-founders created DNSFilter in order to fill the gap between the (in our opinion) lacking feature set of Internet Guide and the high cost of OpenDNS. I implore you to take a look at our service and reach out to us if interested in trailing. We offer fair, transparent usage based pricing.
We've been shopping around for this as well. Currently we use Webroot, which isn't great....but it works.
DNSFilter.com was attractive for a bit, but however it has it's limitations that won't work for us. Mainly Hyper-V support, meaning any of the Windows Credential Guard and sandboxing features won't work with it. Also, UWP apps won't work either.
Trying to get some time to try out Cloudflare Teams, but the cost to that is pretty high.
​
We have also thought about replacing our DNS filtering with an EDR/XDR solution, as we have evidence that DNS filtering hasn't really caught anything.
Yes. It's related to the region being undefined. I was originally thinking it was a problem with 1.0.2.47, but another possibility is that it appears that bobcatminer.com was added to dnsfilter.com's blacklist around the same time, so that could be impacting things as well as a lot of routers rely on their blacklist to kill access to questionable domains.
I haven't done the packet inspection to see if Bobcat miners rely on being able to resolve bobcatminer.com and pull down information, but it wouldn't surprise me.
WOW! 6000 endpoints! that's a lot endpoints! Sorry to hear about the cypto.
Yes. I think it's best to remove the ability to shutdown Webroot. It also has it's advantages that you cant just remove it from the endpoint.
We only have about 150 endpoints, some are breakfix as I am new to the MSP part of things, so as you can imagine they don't want advanced security...
I have been looking at DNSFilter.com and have added it at a few sites and it seems pretty good. Quad9 is also good, but with no reporting...
I totally agree that email is your main threat these days, but people just don't realise it.
You might look at DNSFilter.com and their education offering with installed agents. Not sure how large your endpoint base is. But with smaller districts we've deployed it too, it's been awesome and thus far been cheaper than every option that was pitched to our education clients. Easy to manage as well.
DNSFilter, the company - https://dnsfilter.com/.
If you're using personalDNSfilter (https://zenz-solutions.de/personaldnsfilter/) then what I said isn't useful for you. I don't know where you got the information about "DNSFilter works with ... governmental organizations" though.
I found links in your comment that were not hyperlinked:
I did the honors for you.
^delete ^| ^information ^| ^<3
Add a decent firewall to the mix that can stop bittorrent traffic. Alternatively, use a DNS filtering service (dnsfilter.com) and deny all DNS traffic except for the IP addresses of said DNS servers; any firewall should be able to do this simple block. A person could still get around the restrictions with a VPN but that's fine for your parents because the ISP would only see encrypted traffic. My guess is that your parents won't go along with this but there's no magic wand to eliminate all risk without making any changes. I'd try selling it to them by saying you're protecting everybody from malware/virus sites. I was using the DNSFilter.com service for my employer's public wifi and it worked very well.
Hello u/Zwilson50!
We (DNSFilter.com) have full ChromeOS support and a pretty amazing academic discount (90% off). Not sure what you mean by "Classroom tool" but our dashboard shows a lot of information.
Thanks for mentioning us! Anyone reading this thread is welcome to take us for a spin. Our AI blocks 0day phishing domains, malware and unwanted content on your business network. $0 two-week trial
If you’re looking to make a switch we’d be happy to have you over at DNSFilter !
I’m the CEO and one of the founders - I operated an MSP for 13 years before starting DNSFilter. I know what matters, having done it before myself.
We support/operate what is currently the fastest global anycast network in North America and are extremely focused on customer feedback to drive our product. Within reason, I am happy to match or beat any price quoted/invoiced from a comparable provider.
Feel free to reach out directly if I can help.
I have three hubs, only two active at the moment.
As part of this troubleshooting I disabled HomeKit hub on one of the Apple TV that connects via wifi. I currently have an Apple TV via ethernet and a HomePod via wifi. My DNS server is my USG and it uses dnsfilter.com for DNS service.
I will try turning the hubs off for 15 min and see if that helps.
Check out DNSFilter. We do have some AD integration that would likely work with your scenario. If you have any questions, please feel free to DM me and I'll make sure we help you to evaluate your use case quickly.
Disclaimer - I'm the CEO.
Check out DNSFilter. We provide downloadable SSL certs as well as an iOS roaming client. We also have great Education pricing - only $2 per student/staff member per year.
Disclaimer - I'm the CEO. If you have any questions please feel free to reach out.
If you are looking for inexpensive and effective DNS-based content filtering, you probably should look at dnsfilter.com. IMO, it is going to be your best choice based on what you are looking for. Secureanywhere DNS is probably an ok choice too if you are using Webroot, but it's hard for me to recommend anything from Webroot. Others mention Cisco Umbrella, and while it is a fantastic product, it is far more than what you are looking for, and significantly more expensive at the lower numbers of endpoints.
I'd also suggest reading over this previous post as there is probably some helpful info in there for you: https://www.reddit.com/r/msp/comments/abfra6/umbrella_vs_dnsfilter/
Google's 8.8.8.8 & 8.8.4.4, OpenDNS, and then my ISP.
I've been mulling over testing DNSFilter.com, but for the moment what I have works well enough.
I find it very effective... I'm using DNSfilter.com which is cheap and GREAT, and i also block all outgoing dns requests to other dns servers... Yes an expert user can bypass, but also a expert user would be caught using VPNs and still shouldn't be dumb enought to compromise security of the company
My parents have repeatedly told me that they think I'm crazy to leave a stable, well-paying job for an entrepreneurial venture... even though my father ran his own business for 35 years.
They're otherwise supportive though.
I've determined that much like my father, I don't do well working for others. Went full time on DNSFilter in September. Very happy.
Some of our customers use DNSFilter to deal with this issue. Such as blocking the 'illegal content' category for hotels, so they don't have to deal with DMCA takedown notices from their ISP.
(Disclosure: co-founder of DNSFilter)
DNSFilter offers content filtering to prevent your kids from going to bad sites. We're not focused on the home market, though, and charge a minimum of $5/mo. (Normal home use would not go over this)
Who we are: DNSFilter
What we do: DNS-Based content-filtering and threat protection - With Metered Billing
(OpenDNS competitor starting out focused on BYOD networks)
Why I'm posting: We're now in public beta, finishing up a few relevant features this month (mutli-tenant dashboard), and are starting to get attention with our metered-based pricing model.
Call to Action: You can signup for a 14-day free trial at DNSFilter.com