Unknown/Uncategorized sites pose the biggest risk to internet-connected devices because it is often newly registered and obscure domains that are the source of Malware/Phishing attacks and Illegal content. DNSFilter has three options for handling Uncategorized content:
Interstitial Blocking (Recommended)
One of DNSFilter’s distinct and market-leading features is our Interstitial filter. If a domain has never been seen by DNSFilter’s content filtering system, it is categorized in real-time upon the first visit by our Artificial Intelligence engine. Customers can turn on interstitial blocking in their policy, so that they are seamlessly taken to the page if the scan results match up with what is allowed in their policy.
This feature can be turned on by navigating to the Policies menu on the left side of the dashboard, selecting a particular policy, and then turning on the “Enable Interstitial Page Feature” switch on the advanced tab.
The latest version of Google Chrome has introduced incompatibilities with this feature. If you use Chrome, we suggest turning the feature off temporarily while we implement technical workarounds.
Allow All Policies (Default)
DNSFilter sets newly-created policies to allow Uncategorized/Unknown domains by default. This is in order to avoid introducing an overly strict setting that would restrict functionality for most users. This setting only affects Uncategorized domains. Categories that the user has set in their policy will still take effect.
Although this policy is the least restrictive, DNS requests to never before seen domains will still trigger the AI engine to scan and classify them, so that future DNS requests are treated accordingly.
New policies are automatically set to Allow Uncategorized/Unknown domains. If you have made changes and wish to restore this setting, navigate to the Policies menu on the left side of the dashboard, then select a particular policy. Go to the Advanced tab, then turn off the “Block Uncategorized/Unknown Sites” switch and the “Enable Interstitial Page Feature” switch.
Block All Policies (Not recommended)
Users who wish to have an extremely restrictive policy can choose to block all sites which are Uncategorized/Unknown. To do this, navigate to the Policies menu on the left side of the dashboard, select a particular policy, and then turn on the “Block Uncategorized/Unknown Sites” switch on the advanced tab.
If you elect to globally block Uncategorized/Unknown sites, there will likely be services that cease to function normally. This is because many web pages and some software applications use content servers that are often obscurely named and not documented. You will need to use the Query Log to determine which traffic to allow to the policy's Allowlist so that your users have reduced interruption.
Article is closed for comments.