In short: Webroot DNS Protection, sometimes listed as Webroot SecureAnywhere DNS Protection, is cloud-based DNS filtering that blocks malicious, risky and unwanted websites by category. It supports DNS over HTTPS, IPv6 and roaming devices. Forever Systems supplies it per device as an add-on to Webroot Business Endpoint Protection, billed monthly.
What Webroot DNS Protection is
Every visit to a website starts with a DNS lookup that turns a name into an address. Webroot DNS Protection sits at that point: lookups go to Webroot's cloud resolvers, which check the domain against Webroot's web classification and reputation data and block the request if it is malicious or against your policy. Because the block happens before any connection is made, threats such as phishing sites, malware downloads and command-and-control traffic are stopped early, whatever browser or application is making the request.
It is fully cloud-based, so there is no appliance to install, and Webroot runs the service from multiple regions on Google Cloud. It works alongside your existing firewall, VPN and other security tools rather than replacing them.
What is included
| Feature | What it does |
|---|---|
| Category filtering | More than 80 URL categories for blocking malicious, questionable or unwanted content such as adult material or streaming |
| Policy control | Pre-configured or custom policies applied by group, device or network |
| Roaming protection | The DNS Protection agent keeps devices filtered when they leave the office network |
| DNS over HTTPS and IPv6 | Supported by the agent, so filtering continues on modern networks and public hotspots |
| Guest Wi-Fi | Network-level policies can protect guest and public Wi-Fi |
| Reporting | On-demand reports on threats blocked and web usage |
DNS Protection is managed from the same Webroot console as your endpoint protection, so policies, devices and reports are in one place.
How Webroot DNS Protection is licensed
DNS Protection is licensed per device and, through us, is added to an account that has Webroot Business Endpoint Protection. That keeps deployment simple: the same devices you protect with the endpoint agent are covered for DNS filtering.
| Item | Unit | Notes |
|---|---|---|
| Webroot DNS Protection | Per device | Requires Webroot Business Endpoint Protection on the account |
It is billed monthly on your Forever Systems invoice, and you can add or remove devices as your estate changes. Ask us for a quote based on your device count.
Requirements and deployment
For devices, the DNS Protection agent is enabled through the Webroot console on machines that already run Webroot endpoint protection. For networks such as an office or guest Wi-Fi, your router or firewall is pointed at Webroot's resolvers and the site's public IP address is registered in the console.
Before switching filtering on, we agree a policy with you: which categories to block for staff, whether different groups need different rules (for example, a stricter policy for pupils or public Wi-Fi), and how to handle exceptions. We then monitor the first weeks of reporting so legitimate sites are not caught.
Who it suits and how we help
Webroot DNS Protection suits organisations already using Webroot that want a simple extra layer against phishing and malicious sites, a way to enforce an acceptable use policy, and protection for staff working from home or on public Wi-Fi. Schools and charities often use category filtering to meet safeguarding expectations.
If you need DNS filtering without Webroot endpoint protection, compare DNSFilter or browse all DNS and web filtering products. Go back to the Webroot overview.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Do I need Webroot endpoint protection to use DNS Protection?
Through us, yes. DNS Protection is added to an account with Webroot Business Endpoint Protection, which also makes roaming protection simple because the agent is already on each device.
Does Webroot DNS Protection work off the office network?
Yes. The DNS Protection agent keeps devices filtered on home broadband, hotspots and public Wi-Fi, and supports DNS over HTTPS.
How many web categories does Webroot DNS Protection have?
Webroot lists more than 80 URL categories that you can allow or block in your policies.
Is Webroot DNS Protection licensed per device?
Yes, per device, billed monthly through Forever Systems. If you also want office or guest Wi-Fi networks filtered at network level, tell us and we will confirm how they are covered in your quote.