Skip to main content
To Customer Support To Customer Support

Webroot® DNS Protection

Welcome to the DNS Protection Discussion Forum!

  • 35 Topics
  • 211 Replies

DNS Leak Prevention - Beta II

  • 4
  • 18
35 Topics
JonathanB
Webroot Employee
JonathanBWebroot Employee
published in Webroot® DNS Protection
DNS Leak Prevention - Beta II

The feedback we received from the previous beta was foundational to its success – to the extent that we did not receive one bug complaint or call to Support indicating a problem!! This community is truly awesome! – Thank you!Further feedback mentioned that the previous beta was challenging to participate in as you needed either a trial of DNS Protection or an active Webroot Management Console. We hear you! With this next beta, this time, no Keycode will be required! Simply download and use the Beta Runner! However, if you prefer to use a Keycode you already have, it can be specified.Why a second beta?No software should ever stand still, it must evolve and progress! The second release of DNS Leak Prevention has some awesome new features that further augment Leak Prevention; namely, we have added the ability to dynamically detect DoH servers! Whereas previously we leveraged BrightCloud to provide an up-to-date list, now that is just the foundation to build on - now new DoH servers are de

39218
TripleHelix
Moderator
3 months ago
JonathanB
Webroot Employee
JonathanBWebroot Employee
published in Webroot® DNS Protection
DNS Leak Prevention BetaBETA

We are very pleased to announce the launch of the DNS Leak Prevention Beta. This is an opportunity for us to share with you the feature we are about to release, as well as to solicit feedback, both from a technical and functionality perspective. Download the Beta Runner (link removed)Documentation available (link removed) What is DNS Leak Prevention? This is a new patent pending feature of the Webroot DNS Protection product. It is designed to provide control of DNS by blocking all alternate DNS resources aside from those configured in Webroot DNS Protection. This is done by locking down port 53 TCP and UDP (DNS), port 853 TCP (DNS over TLS), and port 443 TCP to known DoH providers. Why are we creating DNS Leak Prevention? As Webroot DNS Protection is a DNS filtering product, if we are not filtering every DNS request, it means that things are being missed. For example, if a web browser were to be configured to get DNS resolution directly from its own server, and disregard what was confi

82414
JonathanB
Webroot Employee
3 months ago
J
New Member
Joe32143New Member
asked in Webroot® DNS Protection
Webroot DNS for Azure point to site connections

Hi Team,anyone has any experience implementing DNS protection for users who use VPN (Point-to-site). In my case, it is bypassing the DNS filtring after the VPN gets connected. Tried to play with protected networks feature but no luck. Any experience, tip or advice would be welcome.We have mixture of Azure p2s and Sonicwall global VPN client, both bypass DNS agent.

261
J
Community Expert Advisor
10 months ago
J
New Member
judywatsonNew Member
asked in Webroot® DNS Protection
Webroot DNS Protection and Web Filtering Software Compatibility Issues

Hello forum members,I hope everyone is doing well. Today, I would like to discuss an issue I've been encountering regarding the compatibility between Webroot DNS Protection and our web filtering software. If any of you have experienced similar challenges or have insights to share, I would greatly appreciate your input.The Challenge:Compatibility between Webroot DNS Protection and Web Filtering SoftwareAs an organization, we understand the importance of web filtering [ https://lenovonetfilter.com/resource/five-common-web-filtering-questions-answered ] to ensure a safe and secure online environment for our users. We have been using a web filtering software solution to control internet access and block inappropriate content. Recently, we implemented Webroot DNS Protection to enhance our overall security measures. However, we have encountered some compatibility issues between these two solutions.Specifically, we have noticed the following challenges:Conflict between Webroot DNS Protection

841
S
New Member
1 year ago
A
New Member
akolauNew Member
asked in Webroot® DNS Protection
after enable dns protection can not access gmail

Hello, after  i enable webfoot DNS  and create dns protection policy  i just check social networking  , when i apply this policy to site  pc’s can not access gmail  from any browser what is the reason of it ??

1354
C
New Member
1 year ago
R
Fresh Face
ronnelFresh Face
posted in Webroot® DNS Protection
Is DNS Protection supported on macOS?

Hi, I tried to enable DNS protection for a macOS device (v10.15.3 Catalina). I noticed there is only a Windows icon on “Install DNS Protection” settings. Does this mean DNS protection is not yet supported on macOS? I checked the docs but couldn’t find anything about this. Is there a way to manually install the DNS protection agent if it is not possible via the policy settings? Thanks for any help.    

124212
S
New Member
1 year ago
B
New Voice
BillSlavenNew Voice
asked in Webroot® DNS Protection
DNS Protection

Hi Where do you manage DNS Protection now in the new console including reports? Thanks

853
Jamesharris85
New Voice
2 years ago
T
Fresh Face
tanthonyFresh Face
posted in Webroot® DNS Protection
Uncategorized and does not Exist does not show on block page

The block page category function does not work for uncategorized sites. The user and tech had no idea why the page is being blocked. On that if a URL does not resolve there should be a Category as well. People will typo URLs and think the page is blocked when it is just them going to the wrong place.

461
J
New Member
3 years ago
kkumar
kkumarRetired Webrooter
posted in Webroot® DNS Protection
Webroot DNS - How is it working for you?

Hi All – I am the Product Manager for DNS Protection and my colleague @JonathanB and I are resident DNS evangelists and we are always interested in hearing from you on your experience with the product – good or bad! It has been close to 2 years since we launched DNS Protection service to the market and I am happy to share that we received the highest rating by Expert Insights and we are seeing good steady adoption of the product. Webroot is committed to serving our SMB and MSP customers and bringing best in class Security offerings. To recap, 2018 was a very busy year for us and I would like to highlight some key product enhancements that has driven our growth: VPN support + IPv6 support (only vendor to support IPv6 for roaming clients) Granular Policy Management enables support at Site, Group, and individual devices. Stable, Hardened DNS client for roaming devices. Powered by BrightCloud Threat Intelligence – Quality, Brand and Accuracy providing Real Time Threat

125449
M
Fresh Face
3 years ago
G
Fresh Face
gt727hpFresh Face
asked in Webroot® DNS Protection
How do I block all websites, but just allow a few

I need to block all websites except for six that are allowed on the computers.  This is a very locked down environment.  I don’t see a way to block “ALL websites” and only allow just a handful. wildcards do not work thanks 

7136
G
Fresh Face
3 years ago
J
Fresh Face
jeppleyFresh Face
asked in Webroot® DNS Protection
WebRoot DNS Web Filter Overwritten while connected to VPN

Hello all,I saw a few other forum posts about this topic with no replies.When an offsite domain workstation connects to our VPN, all of the webroot DNS filters are overwritten and they can access any website. When disconnected from the VPN, the web filter takes effect again almost immediately.We plan to take a look on our end with the firewall, but wanted to bump this question since it seems to be a popular one and I wasn’t sure if anyone has come across a solution.Thank you!

2122
J
Fresh Face
3 years ago
G
New Voice
gru_dyatesNew Voice
asked in Webroot® DNS Protection
DNS Protection and SSL/TLS Inspection

For home-based teleworkers (in particular) who do not have a hardware firewall doing SSL/TLS Deep Packet Inspection, does Webroot DNS Protection mitigate most of the threats that TLS Inspection would likely catch?   

2284
dstokes1
Webroot Employee
3 years ago
M
Fresh Face
Mike719Fresh Face
asked in Webroot® DNS Protection
No on prem DNS servers

Really need a sanity check.  Getting ready to deploy DNS protection to a client that only has endpoint protection.The only difference between this client and other using DNS protection is that they don’t have a DNS server.  They have no on-prem servers or services that would need to resolve locally.  Storage and apps are cloud based.I couldn’t find anything in the deployment guides about anything different for this type of environment.  I suspect it is because there is nothing different that needs to be done, but I thought I would reach out to the community pre-deployment to see if anyone has deploy to a similar environment recently and what to expect.TIAMike

1596
M
Fresh Face
3 years ago
D
New Voice
Duke_NukemNew Voice
asked in Webroot® DNS Protection
DNS Protection Reporting

Hi,   We're currently running a demo of the DNS Protection agent.  So far, I like the ease of install; just enable it on the Webroot SecureAnywhere Endpoint Policy and it gets installed pretty much immediately (next poll).  That's nice.  Also like the DNS protection at the network level - guest wifi, DNS forwarders.  So anything devices on the network get the benefit as well.   What I'm not liking is the reporting.  There's no way to do a custom report on a user's web browsing.  And there's no DNS Charts for the Dashboard.  It would be nice to quickly look at the Dashboard and see some charts for Web Browsing - Top Users, Threats Blocked, etc.  We're currently a Forcepoint shop and potentially looking to switch   Are there any Reporting updates coming soon to this product?   Thanks.

5747
gherbstman
New Voice
4 years ago
E
New Voice
ethanhelioNew Voice
asked in Webroot® DNS Protection
DNS Protection Policies?

Can anyone tell me where I should make new DNS protection policies? If I go to the larger policies at the top, these don’t show up in DNS protection. If I go to the cog for DNS protection, you can only choose a policy for the site as a default. If I go into the client this is to manage Endpoint Protection. We have a customer, say “steve inc” for example, I need half to have one DNS policy but the other half another, it would seem this is impossible?

1832
J
New Member
4 years ago
C
Fresh Face
CenapAderFresh Face
posted in Webroot® DNS Protection
Dns Protection Problem

We have to big issue in Turkey to use Dns Protection. In the starting of computers Dns Protection agent cannot resolve any websites like 5 minutes. After 5 minutes Dns agent working properly. This is a very big issue, a lot of customers, and potential customer affected from that problem.

454726
P
New Member
4 years ago
kkumar
kkumarRetired Webrooter
posted in Webroot® DNS Protection
A Message from Kiran Kumar, Product Director, Networks - DNS

Hi Everyone,   My name is Kiran Kumar and I am the Product Director for Network portfolio within the business segment – responsible for DNS-Protection and FlowScape - Network Anomaly detection.   I am based in sunny San Diego and have been with Webroot for 4yrs driving various network and Threat Intelligence portfolio. Complementing our award winning Endpoint Protection product, we have put a layered approach in protecting our SMB and MSP clients with a network based solution called DNS-Protection. This is a compelling advantage for Webroot as we look to further establish ourselves as a security leader in the MSP/SMB market and provide a comprehensive security solution and be the trusted security advisor for our MSP/SMB community.   Our approach to product development is to bring incremental releases to market and making adjustments based on customer needs and you can find highlights from most recent DNS-P release here.   I am excited to be the featured PM for this

1909
C
Fresh Face
4 years ago
G
Fresh Face
gog20Fresh Face
posted in Webroot® DNS Protection
Refresh to open Pages

When using Webroot DNS, we have to refresh to get web pages to open.  If we switch to Google DNS servers, web pages open up without issue.  Any ideas

1342
G
Fresh Face
4 years ago
F
Fresh Face
France FiverFresh Face
asked in Webroot® DNS Protection
How i can block google sites unblocked games sites ?

I find webroot Google search engine. I hope you will help. I am teacher in the school. I need to block this site. I give you link. https://sites.google.com/site/allunblockedgames77  Children enter this site in their free time. They don't listen to me. Can I block through the system, will you show me the way ? I want to block all unblocked games web site. I try dns but it is useless. Thank you.

48793
K
5 years ago
G
GregBromley
posted in Webroot® DNS Protection
Website checkout blocked after DNS protection is enabled

I'm not sure if this is appropriate in the community forums, but I was hoping someone could test my DNS settings and verify if they are experiencing the same issue (if this is not appropriate, any troubleshooting tips would be greatly appreciated). I've attached screenshots of my DNS Policy and Web Allow List.   We have a need to occasionally place orders on the site: https://suzannesomers.com, but when attempting to progress past the Customer Information page, nothing happens. There is no blocked page, and the site does not forward any DNS queries that I could see by using the nirsoft DNS sniffer tool.   Here is how to recreate the issue we are experiencing. On the website after a few moments there will be some scrolling products, hover over the picture> Quick View> Add to Bag. Then new the top right of the page is the Cart icon, click the icon and then click Checkout. From here there are two URLs that you could be forwarded to (I have not been able to determine what

1874
C
New Member
5 years ago
A
New Voice
avdlaanNew Voice
posted in Webroot® DNS Protection
Issues when connecting to Wi-Fi

We've had issues when connecting to Wi-Fi where it shows that we have no internet even though we are connected to the wireless network. We've only seen this issue start after implementing Webroot DNS. Anyone else having this?

118015
M
5 years ago
W
New Voice
wowweeNew Voice
asked in Webroot® DNS Protection
Eventerviewer: Event 7011, Service Control Manager: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the DnsProxyAgent service.

I periodically get a "A timeout (30000 milliseconds) was reached while waiting for a transaction response from the DnsProxyAgent service" message in my event log. Sometimes this happens twice in a span of 36 - 39 seconds. What could be causing this? I still have DNS protection running according to dnsptest.webroot.com and I haven't really encountered many issues. I just want to reduce errors in the event viewer.

52422
W
New Voice
5 years ago
D
New Member
dandriesNew Member
posted in Webroot® DNS Protection
Webroot DNS reporting

I'm trying to get webroot to report the following, but I haven't found a report that does this yet. I need to see a report that ONLY shows me websites a user has actually typed into the browser, I don't need to see every bit of communication between the client and the webroot DNS servers. I need to see exactly what time in my own time zone, PST, not UTC when the user accessed each website. I need to see how long a user has actually been on a website. For example, I want to see two different times, one for active website, and then if a user just has the website open, but hasn't touched it for 2 hours, let's say the tab is open in the browser, I want to see the difference between the two. Is there such a report, or can a report please be written to show the above info, as the current reports are useless to me.

1891
btraill
New Voice
5 years ago
D
diceclip
posted in Webroot® DNS Protection
URL Whitelist / Blacklist from DNS Protection by device.

Is there a way to whitelist a URL that will override the general policy, by device? Such as if I have a marketing manager that needs access to facebook, how do I exempt her from the block of the general DNS policy?

9602
kkumar
5 years ago
N
Fresh Face
netmcFresh Face
posted in Webroot® DNS Protection
Customizing the block page

The current customization options for the DNS block page is a little lacking. We added a mailto link in the page to send an email to request a site be unblocked/updated. This goes to our ticketing system. The issue though is that many end users forget to put in the site they need unblocked, so it creates additional overhead in reaching out to the end user to find out which site it is that needs to be corrected. (Most of the time, the site is just categorized incorrectly.) Is there any way to get this information available or to edit the customization text as HTML instead of a WYSIWYG text editor? If we could edit as HTML I could add in a tiny javascript tag that would pull the address and incorporate that into the mailto link so we would always have the correct site that needs to be unblocked.

1805
R
New Voice
5 years ago

Badges

Show all badges

Join the Conversation

Terms & Conditions