New Relay Features – Dynamic WAN and Fail Open
June 3, 2025
Both DNSFilter and ScoutDNS use machine learning categorization engines with a heavy focus on real-time threat analysis/updates. Both solution offer a variety of content categorization with rich policy customization. ScoutDNS and DNSFilter offer direct to customer and MSP/reseller pricing and deliver service across a global anycast network.
ScoutDNS offers a cleaner and more functional business class modern web UI. Using object based configuration, administrators can manage and make changes across one to any number of protected networks with ease. With single click allow/block list additions, real time DNS RDATA/message inspection, roaming client manage functions, and aggregate views by TLD, record type, and more, ScoutDNS customers receive a best in class experience. All of this makes ScoutDNS a great DNSFilter alternative.
ScoutDNS usage based model drastically simplifies internal MSP billing process. With ScoutDNS there is no need to keep track of exact number of end users or guest WiFi hotspots. Our low per query cost calculates into significant average savings on a per user basis over DNSFilter.
Customers choose ScoutDNS for better data insights, a more user friendly UI experience, greatly improved ease of management, and lower cost per user.
ScoutDNS uses DNS-over-HTTPs or DoH as the default full time encryption protocol for all roaming clients. As DoH uses port 443, ScoutDNS roaming clients are always encrypted and can pass DNS through third party firewalls and most VPNs.
DNSFilter offers encryption but it is disabled by default. DNS-over-TLS (DoT) is the only option which uses port 853. This port is commonly managed by third party firewalls meaning the encryption may not be allowed at third party locations.
ScoutDNS offers certain remote management commands for roaming clients directly through the UI. This greatly improves remove client troubleshooting for your technicians. The remote command options include:
Disable: Tells the ScoutDNS agent to unbind from the loopback address and sets DNS to the network default for the device
Forget: Clears a roaming client from the UI. If the agent is still active it will appear again as long as the key is valid
Uninstall: Issues a remote uninstall command to the device
DNSFilter does not offer remote disable. You will need to build and execute a third party script or remote into the device to top the service and set DNS back to network default. For uninstall, you will need touch the device to uninstall should it become disconnected from your remote management tools.
Both ScoutDNS and DNSFilter offer a local forwarding relay solution with a major difference. The ScoutDNS relay is adopted and fully managed via our UI greatly simplifying deployment allowing for easy management of multiple sites remotely.
The DNSFilter relay requires a manual configuration file edited on the host machine and any changes must be made to this file.
ScoutDNS uses custom allow/block lists as separate objects that are then assigned to policies. With ScoutDNS you can assign allow/block lists to specific polices, entire client organizations, or even specific vertical markets. You can also create more than one global lists.
With DNSFilter you only get one list per policy and one global allow/block list. This means you are unable to set lists for specific client organizations or verticals and that lists apply either to all policies or one policy only.
ScoutDNS created a new method to manage and filter TLDs or Top Level Domains. Instead of just adding TLDs to a block list which you can still do if you choose, ScoutDNS offers trusted access TLD lists so that you can choose what TLDs are trusted. In this case all other TLDs are blocked by default and you don’t have to worry about new TLDs being added to the internet because they will be blocked unless specifically trusted first.
| Features | ScoutDNS | DNSFilter |
|---|---|---|
|
Global Anycast Network |
|
|
|
Zero Touch Relay |
|
Requires Config File |
|
Easy Roaming Clients |
|
Requires Keys |
|
Machine Learning Based Categorization |
|
|
|
Safe Search & YouTube Safe Mode |
|
|
|
Multi-Tenant with Single Log-in |
|
|
|
Role Based Access |
|
|
|
30 Days Log Access |
|
Only 3 Days |
|
TLD Filtering |
|
As Blocklist Only |
|
Inspect Raw RDATA/Message |
|
|
|
Object Based Allow/Block Lists |
|
No, 1 to 1 Policy Based |
|
Make Any Allow/Block List Global |
|
|
Searchable logs, Category, TLD, and Record Type aggregate view, full message inspection
Create and mange multiple object based custom lists, add from logs with a single click.
Our highly efficient application model allows us to offer competitive features at reduced costs.
