Feature Requests

Please implement the Safe Search feature for startpage.com . Since it's one of the few sites (if not the only one) without AI, many customers would look forward to it. This way, it can be enabled under Filtering/Policy/Privacy/Safe Search, just like other Safe Search-compliant search engines (Google, DuckDuckGo, Bing, etc.).

An option to provide a domain name, and an option to automatically add common typo-squatting variants to the universal block list, or specific policy.

Description: -Customers running multiple Relays currently have to configure each one individually, which takes a lot of time and can lead to configuration drift. We’d like a way to manage Relay configurations centrally from the dashboard by grouping Relays into a policy and pushing one shared configuration to every Relay in that group. Requested capabilities: 1) Relay groups/policies: Group multiple Relays and apply a single configuration to all of them from the dashboard. 2) Shared configuration settings pushed to every Relay in the group, including: -Upstream order -Local resolver lists -Addresses to resolve locally 3) Domain-specific resolver routing (conditional forwarding): Assign specific resolvers to specific domains, for example: - example.domain.com → 172.0.0.1, 172.0.0.2 - another.sample.com → 172.50.0.1 Expected benefits: -Consistent configuration across all Relays in a group, with no drift -Less administrative overhead for large, multi-site deployments -Fewer misrouted queries caused by manual configuration errors -Easier scaling as new Relays are added

We’re exploring giving organizations the ability to add dedicated egress IP(s) to their SecureTransit plan, so you can allowlist those IP(s) for access to SaaS apps, cloud consoles, and internal resources without trusting shared VPN egress IPs. Only traffic from your org will egress from the dedicated IP address(es) that you reserve.

It would be nice to have the option to enable or disable DNS Filter when it detects a trusted network, Cisco has this feature with umbrella and umbrella w/AnyConnect it works great when user are in the office behind a secure network. https://support.umbrella.com/hc/en-us/articles/360044123751-Disable-Umbrella-on-Trusted-Networks-Protected-Network-Disable-for-Enterprise-Networks

Ability to sync local domain and resolvers across sites. Its a pain to re-input the same items over and over again.

Would it be possible to have SecureTransit enable automatically when off a specified network?

Part of the reasons for having and utilising an API, is to take the human/manual factor out of the process. I would like to be able to update the Plan, Term, Users and Guest Wifi counts from the /settings/billing-info/subscription page via the API. It feels like a massive oversight to force us to login to DNS Filter every month and manually update a lengthy list of companies to ensure we're doing the right thing.

The option to redirect (or block) a specific URL request. For example, instead of simply seeing that " facebook.com " is blocked, the user is forwarded to " workplace.com ", the version of Facebook that is used by the company. Or perhaps you have a customer / vendor with something unnecessary... like tracking and a survey in every email signature that causes a problem; or a website containing auto-play videos that aren't good for a user's slower connection. You can identify/block that specific request without blocking their entire website.

It would be useful to be able to add a temporary whitelist/blacklist entry. We occasionally need to whitelist (or blacklist) a domain but don't want it permanently added. It would be great if we could indicate that this rule automatically expires in X days. And I guess we'd need a way to see expiring/expired rules.