Any service that provides a means to circumvent DNS-based content filtering—including virtual private network (VPN) and anonymous surfing services—is classified as a threat and blocked when the Proxy & Filter Avoidance category is enabled.

Examples of blocked services include Google Chrome Translate, which can function as a proxy for any website, and VPN solutions that allow users to bypass network security controls.

In some environments, bypassing DNSFilter may be necessary for specific services. Rather than disabling the Proxy & Filter Avoidance category entirely, review Software Conflicts for alternatives that allow services to function while keeping network security controls in place.

To protect against user circumvention, see Preventing content filtering circumvention for available defensive measures.