DNA: Web Filters

Follow

Topic

This article describes the Web Filters feature of the Datto Networking Appliance (DNA). 

Environment

  • Datto Networking Appliance (DNA)

Prerequisites

If your Datto Networking Appliance uses firmware 1.15 or above, see the next section of this article. As of this statement, 1.15 is a pending release. If your device is on firmware 1.14.4 or below, see the 1.14 section of this article. You can check your appliance's firmware version from its Status page.

Overview (TitanHQ update - firmware 1.15 and above)

The DNA uses web filtering logic that proactively assesses and halts threats prior to entering your network at the DNS level, and prevents malware and ransomware attacks.

If this is your first time using the Web Filtering feature, you will need to accept its Terms of Service. Any existing web filtering settings will automatically migrate over when accepting the Terms of Service.
Enabling web filtering will override any custom DNS settings defined on the DNA due to the feature utilizing its own DNS. If a custom DNS is required, you must disable web filtering.

To access the Web Filtering card, log into the DNA web interface, and click Applications, as shown in Figure 1.

Figure 1: Applications

Once on the Applications page, click the Web Filters link. You will see the Web Filters management card shown in Figure 2.

Figure 2: Web filters

You can toggle web filtering on or off by using the Yes and No radio buttons under the Enable  heading.

You can also toggle Safe Search on and off by using its respective Yes and No buttons. Safe Search allows you to force users to use the safe search functions within several major search engines including Google, Yahoo and Bing.

You can choose the DNS server's geographical location by selecting one under the DNS Server Zone header, or by choosing Automatic to have the DNA select the closest one to it.

In the Block Content Types section, you can choose the types of content you would like to filter.

You can also choose to blacklist a category, but allow certain sites from the blacklisted category through the filter. For example, if you wanted to block all social media sites except for Instagram and LinkedIn, you would block the Social Media content type, and then add Whitelist entries for instagram.com and linkedin.com in the Whitelist / Blacklist Domains category.

Alternatively, you can whitelist a category, and block only specific sites within that category.

When Whitelisting a site, you may need to add the www. prefix to its URL if it is not filtered correctly.

Overview (firmware 1.14 and below)

If you are on firmware 1.14 and below, the following web filtering settings are available, as seen in Figure 3. Access the Web Filters card the same way as if you were on 1.14:

mceclip1.pngFigure 3: Web Filters (firmware 1.14 and below)

You can toggle web filtering on or off by using the Yes and No radio buttons under the Enable Web Filters heading. In the Block Content Types section, you can choose the types of content you would like to filter.

You can also choose to blacklist a category, but allow certain sites from the blacklisted category through the filter. For example, if you wanted to block all social media sites except for Instagram and LinkedIn, you would block the Social Media content type, and then add Whitelist entries for instagram.com and linkedin.com in the Whitelist / Blacklist Domains category.

Alternatively, you can whitelist a category, and block only specific sites within that category.

When Whitelisting a site, you may need to add the www. prefix to its URL if it is not filtered correctly.

Was this article helpful?

0 out of 0 found this helpful

You must sign in before voting on this article.

Calling all Partners! We want to hear your feedback! Please participate in this quick survey and help us build a better, more-relevant Knowledge Base!

Want to talk about it? Head on over to our Community Forum!