Browse Getting Started
- Application categories (Zero Trust app management)
- Active Directory group policies
- Content categories
- Custom block pages
- Don't mix DNS providers
- Prevent DNS bypass
- Safe Search explained
- Safe Search supported search engines
- Security categories
- Working with policies
- Working with allow and block lists
- YouTube Restricted Mode explained
ScoutDNS resolver IPs
Where to find the ScoutDNS anycast resolver IPs in the Admin Console, plus what's available (primary, secondary, IPv6) and how the closed-resolver model works.
ScoutDNS runs a global anycast resolver network. From anywhere in the world, the same pair of IPs routes to the geographically nearest resolver for the lowest latency. The exact addresses are visible in the Admin Console.
Where to find your resolver IPs
In the Admin Console, click the Help icon (top right) and select IPs List.

We expose:
- Primary and secondary anycast IPv4 (the two you’ll use 99% of the time, for WAN forwarding)
- Direct-access IPv6 addresses per location, available on request for customers who need them
Closed resolver model
[!IMPORTANT] ScoutDNS is a closed resolver. It only responds to queries from networks you’ve registered (by WAN IP) or from devices running the roaming agent. Hitting the resolver IPs from an unregistered network will return no response, by design.
If you’re getting no resolution after pointing your network at the ScoutDNS IPs, the most common cause is that your WAN IP hasn’t been registered in the Admin Console yet. See the Quickstart: WAN forwarding for the registration step.