DNSFilter
Create
Log in
Sign up
Roadmap
Feedback
Feature Requests
497
Changelog
Boards
Feature Requests
Known Issues
Powered by Canny
Feature Requests
Let us know what feature you'd like to see!
What do the statuses mean?
Under Review = Expected to enter the queue
Up Next = Work starts in <60 days
Developing = Launching in <90 days (unless noted)
Description
Category
Roaming Clients
RC - Windows
RC - macOS
RC - iOS
RC - Android
RC - Chrome
Policy and Filtering
Integrations
Integrations - SIEM
Integrations - Ticketing
Integrations - Workflow
Integrations - Alerting
Integrations - Security
Integrations - Authentication
Integrations - RMM
Integrations - Identity
Reporting
Dashboard
MSP Experience
Relay
Relay - Configuration
Relay - Deployment
Reporting - Audit Log
Reporting - Query Log
Reporting - Result Validation
Reporting - Scheduled Reports
Reporting - Alerting
Reporting - AppAware
Reporting - Data Export
Block Page
Policy - Filtering
Policy - New Categories
Policy - AppAware
Policy - Testing
Policy - Block Page
Policy - Allow and Block Lists
Policy - URL Filtering
Connectivity
Connectivity - DNS-over-HTTPS
Dashboard - Mobile
Dashboard - Configuration
Dashboard - Authentication
Role Based Access (RBAC)
RBAC - Role Management
Deployments
Deployments - Collections
API
MSP - Tenant Management
MSP - Reporting
MSP - Integrations
MSP - API
Billing
Uncategorized
Showing
Trending
Sort
Trending
Top
New
Filter
Under Review (next Candidate)
Next (developing In <60 Days)
Developing (live In <90 Days)
Beta
More Information Needed
Launched
posts in
All Categories
All Categories
Roaming Clients (77)
RC - Windows (8)
RC - macOS (9)
RC - iOS (5)
RC - Android (7)
RC - Chrome (1)
Policy and Filtering (99)
Integrations (41)
Integrations - SIEM (6)
Integrations - Ticketing (1)
Integrations - Workflow (5)
Integrations - Alerting (4)
Integrations - Security (1)
Integrations - Authentication (2)
Integrations - RMM (2)
Integrations - Identity (1)
Reporting (72)
Dashboard (59)
MSP Experience (54)
Relay (12)
Relay - Configuration (1)
Relay - Deployment (5)
Reporting - Audit Log (3)
Reporting - Query Log (18)
Reporting - Result Validation (2)
Reporting - Scheduled Reports (7)
Reporting - Alerting (11)
Reporting - AppAware (3)
Reporting - Data Export (3)
Block Page (14)
Policy - Filtering (29)
Policy - New Categories (16)
Policy - AppAware (25)
Policy - Testing (3)
Policy - Block Page (4)
Policy - Allow and Block Lists (10)
Policy - URL Filtering (3)
Connectivity (10)
Connectivity - DNS-over-HTTPS (4)
Dashboard - Mobile (1)
Dashboard - Configuration (23)
Dashboard - Authentication (4)
Role Based Access (RBAC) (7)
RBAC - Role Management (6)
Deployments (5)
Deployments - Collections (2)
API (1)
MSP - Tenant Management (14)
MSP - Reporting (18)
MSP - Integrations (3)
MSP - API (1)
Billing (1)
Block Response based on geo location of destination IP
Provide the ability to block DNS requests if the domain's destination IP address belongs to a specific country. Allow customers to decide which countries are blocked/allowed in the Dashboard.
22
·
under review (next candidate)
79
"Monitor/Audit Only" Policy Option
A client approached me and asked if we could monitor what his employees were doing without stopping the activity. I was stumped, there's nothing for that. Could we have a monitor only policy in place along with the block policy? To filter all the things a company would want to see but not block completely. (Shopping, Social Media, and Sports are a few that come to mind)
9
62
Allow a user to have multiple policies assigned
Would be nice to be able to have a single user be assigned multiple policies. This is to prevent having to place an allow for everyone when only one person needs it. To help minimize the risk of over allowing a site for risk and or business need.
1
10
Block Bing Chat
The Bing search engine allows Bing Chat to be disabled in a similar way to SafeSearch is enforced - by mapping www.bing.com to nochat.bing.com or nochatstrict.bing.com . Add this as an option to the SafeSearch configuration page.
0
3
AI Check on Parked Sites & Domains
We like to use the Parked Sites & Domains options - however it blocks too many valid sites. Suggestion to have the AI run a categorization check on these sites to try and properly Categorize them. Much in the same way it runs on a Uncategorized Sites.
12
·
under review (next candidate)
42
Expiring whitelists/blacklists entry
It would be useful to be able to add a temporary whitelist/blacklist entry. We occasionally need to whitelist (or blacklist) a domain but don't want it permanently added. It would be great if we could indicate that this rule automatically expires in X days. And I guess we'd need a way to see expiring/expired rules.
5
43
Create a BLACK HOLE feature that any domains listed in here if matched are NOT PROCESSED at all but instead are BLACK HOLED.. Do not process DNS for them at all just drop the connection and DO NOT count this traffic as part of the user traffic
The NETWORK should be able allow us to define a list of domains that we simply want to BLACK hole and NOT TO be processed at all. NOT a block but simply a black hole with no reply. This is in relation to DNS being used to spy on SMART TV Views where the TV sends a continuous stream of DNS queries revealing essentially WHAT you are watching and FOR HOW LONG you are watching. These domains are discoverable and they can be BLOCKED by DNSFilter but the problem this creates is that a single SMART TV left on 24x7 will generate upwards of 2 millions DNS queries as it continues to rat out what your watching.... A single SMART TV can generate 2 million DNS requests per month -- non of which are legitimate DNS requests. They are using DNS port 53, / 853 and DNS over TLS or HTTP to sneek an outbound packet that basically reveals WHAT YOU are watching and how long you are watching it. These packets can be a stream of continuous DNS packets going out from the TV. -- WHY NOT allow for a catch all BLACK HOLE in the DNSFilter cloud that if domains are matched here there are simply DISCARDED with no DNS reply response -- thereby not counting as traffic processed by DNSFilter at all and not counted against your TRAFFIC threshold.. This is a major issue. SURE -- we can reconfigure the TVs to use 1.1.1.1 or some other DNS server, but shouldn't DNSFilter offer a soluition here - -you can not expect everyone to be savy enough to change their DNS server settings on their TV. Lets be honest, the average user of a smart TV is using IP addressing and DNS server settings pushed to their device via DHCP probably associated with their WIFI router or a telcom network end point. Users are completely oblivious to DNS servers and changing them. So we need an elegant way to just DROP this traffic at the CLOUD level so it is just not counted. Just drop the DNS request and do not process it at all. The TV will still run and now you are PROTECTING the users of that TV so that their USER WATCHING habits are not being spied on and used for targeted advertising. THIS IS a security and privacy issue.
0
9
Filter list for Update services
A preconfigured filter to control access to public internet update services such as Apple, Windows and other MS products and there are many others. This will be useful to reduce congestion on inbound over the gateway. A one click and forget solution. In some countries that have expensive internet or data capped internet services (yes they still exist), this helps preserve bandwidth and reduce expense for internet services.
0
3
Doppelgänger Blocker
Look at adding Doppelgänger for threat tab to block similar domains. See attached graphic
0
5
Do not Block pages which belong to another category
In our setup we block pages which belong to category "drugs". However we would like to have the pages which belong to the category "educational" (and "drugs") not to be blocked. We have seen lot's of pages which belong to both categories which we are now whitelisting. Perhaps it can be made possible with a "smart filter".
3
21
Load More
→
Powered by Canny