DNSFilter review

DNSFilter checks DNS requests before a connection forms, blocking malicious or unwanted domains at the DNS layer. The product description positions it as a security layer for organizations and their users, with filtering for threats and web content, remote device protection, app controls and activity reporting. It is not described as a replacement for endpoint security or other network controls.

Its feature set includes protection for users on and off the network, plus detection of newly registered and weaponized domains that DNSFilter says can happen up to 10 days before third-party threat feeds identify them. AppAware shows which apps users access and can block the domains behind them. CyberSight is aimed at spotting shadow IT, supporting investigations and identifying potentially wasted SaaS spend. Insights reporting provides network and security activity with detailed logs. These features make DNSFilter relevant to IT teams and MSPs that want centralized DNS controls across users and devices.

DNSFilter’s clearest case is as a centrally managed DNS layer for organizations that need threat and content filtering across users, including when they are away from the office. Its stated detection of some newly registered or weaponized domains up to 10 days ahead of third-party feeds is a specific point of differentiation, though that claim comes from the product material, not an independent comparison.

The broader plans add visibility beyond basic blocking. According to the pricing information, Plus includes CyberSight and AI usage reporting, Guest Wi-Fi, and Roaming Clients on any platform. AppAware can show which apps users access and block their underlying domains; CyberSight is intended to surface shadow IT and help identify wasted SaaS spending. That may matter to teams trying to understand app use as well as stop known threats.

A Reddit user who moved from Umbrella said DNSFilter handled DNS filtering, web filtering and reporting as expected, while also warning that DNS filtering can produce false positives and helpdesk calls. That is a useful caveat, but also a reminder that the basic job is the product’s main value—not a reason to assume it replaces a wider security stack.

The minimums can matter more than the headline per-license price. According to the pricing information, Core is $1.15 per license monthly or $1 annually, but has a $23 monthly or $240 annual minimum. Plus is $2.50 monthly or $2.25 annually, with a $62.50 monthly or $750 annual minimum. Enterprise pricing is available on request. MSP pricing starts at $150 per month and requires a monthly minimum; education pricing is also quote-based. There is no free plan, but a 14-day trial is listed.

The add-on pricing is not fully clear: SecureTransit is listed at $2 per license monthly, while a separate $0.25-per-license monthly amount appears in the reporting and policy section without a clearly identified product. Premium Support options are listed, but their prices are not published. One Reddit user also reported that bulk-discount billing was tied to query volume and could prompt requests for more money; treat that as an individual account, not a confirmed description of current standard plans.

Support expectations deserve a check before switching. A Reddit thread alleged that an AI support agent presented itself as human; DNSFilter’s support VP said the tool was for self-service and that users could reach a human. The thread later included a user saying the help button routed to a person.

DNSFilter’s Core plan lists $1.15 per license monthly, or $1 with annual billing. The minimum is $23 per month or $240 per year, so the annual rate comes with an upfront commitment. Plus rises to $2.50 monthly or $2.25 annually per license, with minimums of $62.50 monthly or $750 annually. That tier adds Guest Wi-Fi, CyberSight and AI usage reporting, and Roaming Clients on any platform. The pricing page lists a 14-day free trial and no free plan.

Enterprise pricing and minimums are available by quote. MSP pricing starts at $150 per month and requires a monthly minimum; Education pricing is also quote-based. Add-ons can change the bill: SecureTransit is listed at $2 per license monthly. The page also shows $0.25 per license monthly in its reporting and policy section, but the associated item is unclear. Premium Support add-on prices aren’t published. Check which billing minimum applies before comparing per-license rates.

The published material doesn’t publish migration steps, expected effort, data-export options, or retention limits. Before switching, ask DNSFilter how to move existing policies and logs, how roaming devices are enrolled, and what happens to reporting data if you leave. The feature list includes remote protection and detailed activity logs, but that doesn’t confirm what can be exported or transferred.

We also can’t substantiate Reddit-reported reasons for leaving: no Reddit posts or comments were included in the published material. The stated risks to weigh are clearer: minimum commitments, support expectations, and possible filtering false positives. Get the applicable monthly or annual minimum in writing, and confirm the support terms and a process for reviewing blocked domains before committing. If you’re replacing DNSFilter, verify that the alternative covers the roaming-device and app-control needs your team relies on; those requirements can affect the switch more than the headline license price.