Policies & Filtering
Categories, allow/block lists, Safe Search, and user-based policies.
15 articles
- 1
Working with policies
Where ScoutDNS policies attach and how to change them: the Deployments view, WANs and LANs, client profiles, and per-device overrides.
5 min Updated Jul 19, 2026 - 2
Content categories
Reference list of every content category ScoutDNS uses for policy filtering, organized by group with definitions for each.
8 min Updated Mar 31, 2025 - 3
Security categories
Threat-focused category reference: the Security categories block malware, phishing, command-and-control, compromised hosts, and other malicious infrastructure.
2 min Updated Aug 23, 2025 - 4
Application categories (Zero Trust app management)
Block whole categories of web applications while allowing specific apps through an allow list, ideal for zero-trust VPN and remote-access control.
4 min Updated Aug 23, 2025 - 5
Working with allow and block lists
Create allow/block lists that override category decisions: exact vs subtree matching, precedence, global lists, and import/export.
6 min Updated Jul 19, 2026 - 6
Zero Trust TLD Filters
Shrink your attack surface with Zero Trust TLD filters: untrusted TLDs are blocked immediately, trusted TLDs still get full filtering.
5 min Updated Jul 19, 2026 - 7
Safe Search explained
How ScoutDNS enforces Safe Search on Google and Bing, what each setting does, and how to handle apps that depend on raw search results.
3 min Updated Jul 21, 2026 - 8
Safe Search supported search engines
Which search engines ScoutDNS can enforce Safe Search on (Google and Bing), and what happens to other engines under Enabled + Block Search Engines.
1 min Updated Jul 21, 2026 - 9
YouTube Restricted Mode explained
How ScoutDNS enforces YouTube's Strict, Moderate, and Unrestricted levels, and how Google Workspace settings interact with network policy.
2 min Updated Mar 31, 2025 - 10
Custom block pages
Brand the page users see when ScoutDNS blocks a domain: edit text, logo, and review options, preview before saving, manage multiple pages.
4 min Updated Jul 18, 2026 - 11
Prevent DNS bypass
Stop users from sidestepping ScoutDNS: firewall rules that block outside port-53 traffic, plus locking down DoH and DoT.
3 min Updated Aug 23, 2025 - 12
Don't mix DNS providers
Why pointing at ScoutDNS and another resolver (like 8.8.8.8) at the same time causes inconsistent filtering and reporting, and what to do instead.
1 min Updated Mar 31, 2025 - 13
Active Directory group policies
Apply ScoutDNS policy by Active Directory group so policy follows the user across devices; AD info is collected by the roaming agent.
4 min Updated Jul 25, 2026 - 14
Entra ID group policies
Apply ScoutDNS policy by Microsoft Entra ID (formerly Azure AD) group membership. Uses a read-only Enterprise App connection, no agent-side AD discovery needed.
5 min Updated Jul 25, 2026 - 15
Tracking individual users
What visibility each deployment level offers: WAN forwarding shows WAN IP, the Relay shows LAN IP, and the roaming agent enables per-user reporting.
2 min Updated May 22, 2024