DNS Filtering has the following requirements:
Domains and sub-domains that are Fully Qualified Domain Names such as (mail.google.com) or Partially Qualified Domain Names such as (google.com) are supported. Single-label domains such as (contoso) are not supported.
- An active subscription to Incident Response, Endpoint Protection, or Endpoint Detection and Response.
- An active subscription to the DNS Filtering module.
- Global Administrator or Site Administrator role.
Endpoints require the following operating systems to filter network traffic. macOS operating systems are not supported.
NOTICE - The following system requirements are specific for DNS Filtering. For our Endpoint Protection requirements, see System requirements for OneView.
- Windows Server: 2022, 2019, 2016, 2012, 2012 R2
- Windows: 11, 10, 8.1
CAUTION - DNS Filtering is not supported on DNS Servers and will block communications.
Browser and Operating System Requirements
DNS over HTTPS (DoH) or Secure DNS must be disabled for browsers and operating systems to allow DNS filtering to operate properly. See the following articles for managing Windows and browser DoH settings via Group Policy.
Note: Look up instructions for your specific browser if DoH needs to be disabled manually on an endpoint.
Return to DNS Filtering.