Domain Auto-Categorization with Interstitial Blocking
If a domain has never been seen by DNSFilter's content filtering system, likely because it is newly registered or obscure, it is statistically more likely to be used for security threats or Adult/Illegal content.
Currently, Auto-categorization only scans for content, and not for security threats. Any domains which are categorized as a security threat are updated in real time from our various security feeds. DNSFilter plans to scan unknown domains for security threats in the future.
DNSFilter provides three options in the Dashboard for handling access to uncategorized domains.
Interstitial Blocking (Recommended)
Requests made to unknown domains will be presented with an “interstitial" block page, where we will attempt to categorize the domain in real time for up to 60 seconds.
If the domain's new categories are allowed by the Network policy, the browser will display a confirmation message
In most situations this will occur within 2-3 seconds automatically. Rarely, it will require refreshing the page, or waiting 60 seconds.
If the domain's new categories are blocked by the Network policy, the browser will display the Network policy's block page.
If the domain fails to auto categorize after 60 seconds, DNSFilter will automatically stop trying to auto categorize the domain after 15 minutes internally, and set it as an "Uncategorized Domain".
For Interstitial Blocking, ensure the Enable Interstitial Page Feature option is checked in the Network's Policy.
All requests for uncategorized domains will resolve normally. DNSFilter will perform categorization for these domains in the background for future requests.
For Allow All, ensure both options for blocking uncategorized domains are unchecked in the Network's Policy.
All requests for uncategorized domains will be blocked. DNSFilter will perform categorization for these domains in the background for future requests. If the domain is determined to be in an allowed category, the user will be allowed to access it shortly after. This is only recommended for highly-restrictive content filtering policies.
For Block All, ensure the Block Uncategorized/Unknown Sites option is checked in the Network's Policy