Close this search box.


open-dns (3)

DNSFilter Alternative

DNSFilter is a good content filtering solution with a large global anycast network, a modern UI, and an MSP focus.

How We’re Similar

Both DNSFilter and ScoutDNS use machine learning categorization engines with a heavy focus on real-time threat analysis/updates. Both solution offer a variety of content categorization with rich policy customization. ScoutDNS and DNSFilter offer direct to customer and MSP/reseller pricing and deliver service across a global anycast network. 

How We’re Different

ScoutDNS offers a cleaner and more functional business class modern web UI.  Using object based configuration, administrators can manage and make changes across one to any number of protected networks with ease. With single click allow/block list additions, real time DNS RDATA/message inspection, roaming client manage functions, and  aggregate views by TLD, record type, and more, ScoutDNS customers receive a best in class experience. All of this makes ScoutDNS a great DNSFilter alternative.

With MSPs

ScoutDNS usage based model drastically simplifies internal MSP billing process. With ScoutDNS there is no need to keep track of exact number of end users or guest WiFi hotspots.  Our low per query cost calculates into significant average savings on a per user basis over DNSFilter.

What Customers Say

Customers choose ScoutDNS for better data insights, a more user friendly UI experience, greatly improved ease of management, and lower cost per user.

Key Differentiators

Roaming Client Encryption

ScoutDNS uses DNS-over-HTTPs or DoH as the default full time encryption protocol for all roaming clients. As DoH uses port 443, ScoutDNS roaming clients are always encrypted and can pass DNS through third party firewalls and most VPNs.

DNSFilter offers encryption but it is disabled by default. DNS-over-TLS (DoT) is the only option which uses port 853. This port is commonly managed by third party firewalls meaning the encryption may not be allowed at third party locations. 

Roaming Client Remote Management 

ScoutDNS offers certain remote management commands for roaming clients directly through the UI. This greatly improves remove client troubleshooting for your technicians. The remote command options include:

Disable: Tells the ScoutDNS agent to unbind from the loopback address and sets DNS to the network default for the device

Forget: Clears a roaming client from the UI. If the agent is still active it will appear again as long as the key is valid

Uninstall: Issues a remote uninstall command to the device 

DNSFilter does not offer remote disable. You will need to build and execute a third party script or remote into the device to top the service and set DNS back to network default. For uninstall, you will need touch the device to uninstall should it become disconnected from your remote management tools.  

Fully Cloud Managed Relay

Both ScoutDNS and DNSFilter offer a local forwarding relay solution with a major difference. The ScoutDNS relay is adopted and fully managed via our UI greatly simplifying deployment allowing for easy management of multiple sites remotely.

The DNSFilter relay requires a manual configuration file edited on the host machine and any changes must be made to this file. 

Object Based Configuration – Allow/Block Lists

ScoutDNS uses custom allow/block lists as separate objects that are then assigned to policies. With ScoutDNS you can assign allow/block lists to specific polices, entire client organizations, or even specific vertical markets. You can also create more than one global lists.

With DNSFilter you only get one list per policy and one global allow/block list. This means you are unable to set lists for specific client organizations or verticals and that lists apply either to all policies or one policy only.

Trusted TLD Filter Lists

ScoutDNS created a new method to manage and filter TLDs or Top Level Domains. Instead of just adding TLDs to a block list which you can still do if you choose, ScoutDNS offers trusted access TLD lists so that you can choose what TLDs are trusted. In this case all other TLDs are blocked by default and you don’t have to worry about new TLDs being added to the internet because they will be blocked unless specifically trusted first. 

Feature Comparison

Features ScoutDNS DNSFilter
Global Anycast Network
Zero Touch Relay
Requires Config File
Easy Roaming Clients
Requires Keys
Machine Learning Based Categorization
Safe Search & YouTube Safe Mode
Multi-Tenant with Single Log-in
Role Based Access
30 Days Log Access
Only 3 Days
TLD Filtering
As Blocklist Only
Inspect Raw RDATA/Message
Object Based Allow/Block Lists
No, 1 to 1 Policy Based
Make Any Allow/Block List Global

ScoutDNS Advantages


Powerful Reporting

Searchable logs, Category, TLD, and Record Type aggregate view, full message inspection


Object Based Config

Create and mange multiple object based custom lists, add from logs with a single click.

Group 41055

Save 30%-50%

Our highly efficient application model allows us to offer competitive features at reduced costs.

Start Your 14 Day Trial

Sign up for a risk free full featured trial account on a single site. There is no credit card required.