In short: ThreatDown DNS Filtering stops devices reaching malicious, phishing and ransomware-linked websites, and blocks categories you choose such as adult content, gambling, piracy, gaming, social media and video streaming, by filtering DNS requests. It is managed in the same ThreatDown console as your endpoint security. Through Forever Systems it is billed monthly as an add-on.
What ThreatDown DNS Filtering is
Every web visit starts with a DNS lookup that turns a name into an address. DNS filtering checks each lookup against threat intelligence and category lists and refuses to resolve the ones you do not want, so the connection never starts. It is one of the simplest ways to cut exposure to phishing and malware sites, and it works for every application on the device, not just the browser.
ThreatDown DNS Filtering adds this to the ThreatDown platform. Policies, block lists and reports sit in the same console as your Endpoint Protection and EDR, and for us that is ThreatDown OneView.
What is included
| Capability | What it does |
|---|---|
| Threat blocking | Stops connections to websites linked to malware, phishing and ransomware |
| Content categories | Restricts categories you choose, such as adult content, gambling, piracy, gaming, social media and video streaming |
| Policy by group | Different rules for different sites or groups of devices, set centrally |
| Central management | Policies and reporting in the same ThreatDown console as your endpoint modules |
DNS filtering complements, rather than replaces, endpoint protection: it stops the visit, while the agent deals with anything that arrives another way. ThreatDown's browser phishing protection, part of Endpoint Protection, adds a second layer inside the browser.
How it is licensed
| Item | How it works |
|---|---|
| Unit | The devices or users covered by the DNS filtering policy; we confirm the counting basis in your quote |
| Term | Monthly, billed on usage from OneView |
| Availability | An add-on to ThreatDown endpoint modules; it is not included in ThreatDown's direct bundles |
| Changes | Add or remove coverage at any time; the invoice follows the count |
Prices depend on numbers and the other modules you run, so ask us for a quote. Compare other approaches in DNS and web filtering.
Requirements and deployment
DNS Filtering is managed from the ThreatDown console and applied to devices protected by ThreatDown, so most organisations enable it on endpoints that already run the agent. We confirm which devices and locations you want covered, including remote workers, when we scope.
A typical rollout:
- Review the sites your users visit and agree a policy with you: threat categories blocked for everyone, content categories by group.
- Apply the policy to a pilot group first and check that business sites still work.
- Agree how staff ask for a wrongly blocked site to be allowed, and who approves it.
- Roll out to everyone and keep the policy under review as needs change.
Schools should note that DNS filtering on its own may not meet every safeguarding filtering expectation; we can talk through what you need alongside your existing filtering.
Who it suits
It suits organisations already running ThreatDown that want web protection without another vendor or console, small offices without a firewall-based web filter, and businesses with remote staff who browse from home networks. It is also a quick win for cyber insurance questionnaires that ask about web filtering.
If you need a full secure web gateway with TLS inspection and cloud app controls, read about the secure web gateway approach on our Cloud Security site, or Cisco Umbrella on our specialist site.
How we help
We design the policy with you, run the pilot, handle unblock requests and keep categories tuned as your needs change. DNS filtering appears on the same Forever Systems invoice as the rest of your ThreatDown subscription. Contact us for a quote.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What does ThreatDown DNS Filtering block?
Websites linked to malware, phishing and ransomware, plus content categories you choose, such as adult content, gambling, piracy, gaming, social media and video streaming.
Is DNS Filtering included in ThreatDown bundles?
No. ThreatDown lists DNS Filtering as an add-on to all of its bundles. Through us it can be added to any endpoint running the ThreatDown agent.
How is ThreatDown DNS Filtering licensed?
Through Forever Systems it is billed monthly on the devices or users it covers, as an add-on to your other ThreatDown modules.
Does DNS filtering replace browser phishing protection?
No. DNS filtering blocks whole domains before a connection starts, for every application on the device. Browser phishing protection, part of ThreatDown Endpoint Protection, works inside the browser. Running both gives two layers against phishing sites.