https://cybertoolchain.io/tools/dnsfilter New releases and features in DNSFilter, tracked by The Cyber Toolchain. en Tue, 03 Nov 2026 14:48:14 GMT https://dnsfilter.canny.io/changelog/11-03-november-3-web-application-and-api-update https://dnsfilter.canny.io/changelog/11-03-november-3-web-application-and-api-update Tue, 03 Nov 2026 14:48:14 GMT DNSFilter adds a Branding settings page for MSPs with CNAME-based custom domains, replacing the legacy Whitelabel page⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • LAN Subnets, Relays, and Roaming Clients grids now show the inherited Policy or Block Page name with an 'Inherited from Site' label, replacing the map-pin icon; global policies show a globe icon beside the name.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Roaming Client delete flow now distinguishes between Delete and 'Delete & Uninstall' — the latter appears only when uninstall-capable agents are selected — and single-client deletes now require type-to-confirm. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/10-28-october-28-web-application-and-api-update-1 https://dnsfilter.canny.io/changelog/10-28-october-28-web-application-and-api-update-1 Wed, 28 Oct 2026 12:37:31 GMT DNSFilter adds unblock request form localization in eight more languages and documents the data export restart API call⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • DNSFilter's block page unblock request form now displays in Italian, Dutch, Portuguese, Russian, Swedish, Czech, Turkish, and Ukrainian when the user's browser is set to one of those languages, joining Spanish, French, and German.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • DNSFilter's API documentation now includes the call to restart a failed Data Export using saved connection settings, so no SIEM credentials are needed to retry. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Tue, 20 Oct 2026 07:55:13 GMT DNSFilter adds multilingual unblock request forms in Spanish, French, and German, and migrates branded subdomains to app.dnsfilter.io.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports Spanish, French, and German on the Request Access form on block pages, auto-detecting the user's browser language.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Migrates managed branded subdomains from `app.dnsfilter.app` to `app.dnsfilter.io` automatically with no admin action required. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/10-13-october-13-web-application-and-api-update https://dnsfilter.canny.io/changelog/10-13-october-13-web-application-and-api-update Tue, 13 Oct 2026 13:29:19 GMT Unblock Request Form now displays in Spanish, French, and German; branded subdomains move from .app.dnsfilter.app to app.dnsfilter.io⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Block page Unblock Request Form now displays in Spanish, French, and German based on the user's browser language setting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Managed branded subdomains migrate from `.app.dnsfilter.app` to `app.dnsfilter.io`; existing subdomains carry over automatically. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Mon, 05 Oct 2026 07:56:30 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Sun, 04 Oct 2026 07:49:55 GMT DNSFilter Windows Roaming Client 3.8.15 adds LocalDomainFallbackEnabled, VPN compatibility improvements, and ISP DNS interception fallback.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `LocalDomainFallbackEnabled` setting to the Windows Roaming Client to control whether unresolvable local-domain queries fall back to DNSFilter or stay on the network — enabling split-horizon and internal-zone isolation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Roaming Client now detects ISP DNS interception and automatically moves the query to the next protocol in the configured order (e.g., DNS-over-TLS) so sites load normally. • Active Directory domain-joined devices in Transparent Proxy and PreCheck modes now register DNS records with the domain controller via secure dynamic updates. • Adds a Branding settings page for MSPs without a custom domain configured, replacing the legacy Whitelabel form, with automatic logo migration. • Query Log switches to cursor-based pagination, replacing page-number paging for stable forward/back navigation. • Adds custom description input to the Diagnostic Tool when 'Other' is selected as the reason. • `Disable Roaming Clients for Conflicting VPN Agents` in Classic DNS Filtering now applies to all devices, and VPN adapter traffic is left to the VPN. • Roaming Client now reads device identity, OS version, and adapter DNS settings from Windows APIs instead of WMI, lowering WMI Provider Host CPU usage on all devices including ARM64 and accelerating startup. • Unblock Requests grid 'Category' column now shows domain category information even when a domain was blocked for a non-category reason (Block List, AppAware, or Security block). • Blocked HTTPS sites now show the block page without a certificate warning on MSP organizations created after September 15. • License overage warning and critical banners are now visible on Custom Dashboards. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/09-30-september-30-windows-roaming-client-v3815-beta https://dnsfilter.canny.io/changelog/09-30-september-30-windows-roaming-client-v3815-beta Wed, 30 Sep 2026 13:55:39 GMT Windows Roaming Client v3.8.15 Beta adds LocalDomainFallbackEnabled for split-horizon control and hardened VPN compatibility.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `LocalDomainFallbackEnabled` setting to control whether local-domain queries that internal resolvers cannot answer fall back to DNSFilter or stay on the local network — enabling correct handling of split-horizon DNS and internal-only zones.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Extends 'Disable Roaming Clients for Conflicting VPN Agents' in Classic DNS Filtering to apply to all devices, leaving VPN adapter traffic exclusively to the VPN agent. • Adds a dedicated response window for the device's own resolver during PreCheck on VPN connections, so queries over VPN tunnels resolve reliably even when the tunnel resolver is slower than DNSFilter's policy check. • Adds automatic DNS restore via the Service Manager: if a VPN event or unexpected shutdown leaves adapters pointed at the filtering proxy, DNS settings are restored and the device is re-registered automatically. • Switches device identity, OS version, and adapter DNS settings reads from WMI to direct Windows APIs, lowering WMI Provider Host CPU usage on all devices including ARM64 and cellular-connected laptops. • Adds timeout enforcement on every local resolver check and distinguishes confirmed answers from resolver errors and empty responses, keeping internal name resolution accurate through outages, sleep/wake, and network changes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/09-29-september-29-web-application-and-api-update https://dnsfilter.canny.io/changelog/09-29-september-29-web-application-and-api-update Tue, 29 Sep 2026 13:10:19 GMT DNSFilter expands Branding settings to more MSPs and adds richer category data to Unblock Requests reviews.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Extends the Branding settings page to MSPs without a custom domain configured, replacing the legacy Whitelabel form, with existing logos carried over automatically.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds domain category information to the Category column in the Unblock Requests grid even when a domain was blocked for a non-category reason (Block List, AppAware, or Security block). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Sat, 26 Sep 2026 07:48:48 GMT DNSFilter macOS Roaming Client 2.4.6 adds IPv6 support, DoH VPN fallback, and component mismatch detection; dashboard gains 'Blocked By' column and scoped deployment access controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a 'Blocked By' column to the Active Requests and Request History grids, showing the reason each domain was blocked (consistent with the Query Log's Method column), also visible in the approval drawer. • Adds 'Last Logged In User' as a default column and 'Friendly Name' as an optional column in the CyberSight Top Clients 'View All' grids on Activity Overview and AI Usage. • Adds type-to-confirm requirement for Roaming Client delete and cleanup deletion actions to prevent accidental mass deletions. • Adds deployment access controls scoped to restricted roles: read-only and policy-only users now have Site Keys hidden, Relay deployment controls disabled, and Roaming Client installer access restricted. • Adds direct link to the Unblock Requests page in admin notification emails, with subject line including the requester's organization name. Breaking changes: • The macOS Roaming Client now requires macOS 13 Ventura or later; devices on earlier macOS versions cannot run v2.4.6. • v2.4.6 checks for the new DNSFilter Root CA G1 certificate; devices with the previous certificate profile will show a 'Fix Installation Issues' prompt until the updated `Combined_Certificates.mobileconfig` (or branded/white-label equivalent) is pushed via MDM. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Fri, 25 Sep 2026 07:51:53 GMT Breaking changes: • The macOS Roaming Client now requires macOS 13 Ventura or later; devices running macOS 12 or earlier will not run v2.4.6. • v2.4.6 checks for the new DNSFilter Root CA G1 certificate; devices without the updated `Combined_Certificates.mobileconfig` profile will display a 'Fix Installation Issues' prompt in the menu bar after upgrading and must have the new profile pushed via MDM to clear it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Thu, 24 Sep 2026 13:08:00 GMT Breaking changes: • The macOS Roaming Client now requires macOS 13 Ventura or later; devices running macOS 12 or earlier will not be able to run v2.4.6. • v2.4.6 checks for the new DNSFilter Root CA G1 certificate; devices without the updated `Combined_Certificates.mobileconfig` profile will show a 'Fix Installation Issues' prompt in the menu bar after upgrading, requiring an MDM push of the updated profile to clear. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/09-23-september-23-macos-roaming-client-v246-production https://dnsfilter.canny.io/changelog/09-23-september-23-macos-roaming-client-v246-production Wed, 23 Sep 2026 18:05:40 GMT macOS Roaming Client v2.4.6 adds IPv6 support, DoH VPN fallback, and a new configuration.json architecture⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `ENABLE_DOH_FALLBACK=true` install-time flag to keep DNSFilter filtering active over DNS-over-HTTPS when a corporate VPN blocks the DNS-over-TLS port.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Switches agent configuration from legacy `daemon.conf` to a new `configuration.json` format; existing installations migrate automatically on upgrade. • Travel Wi-Fi settings in `dns_agent.conf` now apply at CLI install time, and install-time configuration keys use the same Travel Wi-Fi names as the dashboard and documentation. • Adds IPv6 filtering and protection for dual-stack and IPv6-only networks; administrators can set upstream resolution to IPv4-only, IPv6-only, or automatic. • Adds component version mismatch detection: the client now alerts when the menu bar app, system extension, and daemon are running different versions, with a user-facing fix prompt. • Local domain and resolver changes made in the dashboard now apply immediately without a daemon restart. • macOS certificate profiles now install all DNSFilter roots — including DNSFilter Root CA G1 — in a single `Combined_Certificates.mobileconfig` push. Breaking changes: • macOS 13 Ventura is now the minimum required OS version; devices running macOS 12 or earlier will not run the v2.4.6 client. • v2.4.6 checks for the new DNSFilter Root CA G1 certificate; devices that still have the previous certificate profile will show a 'Fix Installation Issues' prompt until the updated `Combined_Certificates.mobileconfig` (or branded/white-label equivalent) is pushed via MDM. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/09-22-september-22-web-application-and-api-update https://dnsfilter.canny.io/changelog/09-22-september-22-web-application-and-api-update Tue, 22 Sep 2026 13:37:17 GMT DNSFilter adds 'Blocked By' column to Unblock Requests grids, type-to-confirm for Roaming Client deletion, and Last Logged In User in CyberSight Top Clients.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a 'Blocked By' column to the Active Requests and Request History grids showing the reason each domain was blocked, consistent with the Query Log's Method column, and also visible in the approval drawer.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds 'Last Logged In User' as a default column and 'Friendly Name' as an optional column in the CyberSight Top Clients 'View All' grids on Activity Overview and AI Usage. • Introduces type-to-confirm requirement for deleting Roaming Clients and running cleanup deletions, preventing accidental mass deletions. • Scopes deployment access controls for read-only and policy-only users across Sites, Relays, and Roaming Clients — hiding Site Keys, disabling Relay deployment controls, and restricting Roaming Client installer access, each with a tooltip directing users to contact a dashboard admin. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/09-16-september-16-macos-roaming-client-v246-beta https://dnsfilter.canny.io/changelog/09-16-september-16-macos-roaming-client-v246-beta Wed, 16 Sep 2026 14:31:02 GMT macOS Roaming Client v2.4.6 Beta keeps DNSFilter active over VPN via DNS-over-HTTPS fallback with `ENABLE_DOH_FALLBACK=true`⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `ENABLE_DOH_FALLBACK=true` install-time flag to maintain DNSFilter enforcement over DNS-over-HTTPS when a corporate VPN blocks the DNS-over-TLS port.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Updated macOS certificate profiles now bundle all DNSFilter roots — including the new DNSFilter Root CA G1 — in a single push profile, replacing prior installs in place. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Wed, 16 Sep 2026 12:59:35 GMT DNSFilter: Launches the DNSFilter MCP Server (GA) under Integrations → AI Connectors, connecting AI assistants (Claude, ChatGPT, Codex) to DNS activity, threat data, policy management, and allow/block lists via the Model Context Protocol. • Reinstalling the iOS Roaming Client now reuses the existing device record instead of creating a duplicate registration entry. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/09-15-september-15-web-application-and-api-update https://dnsfilter.canny.io/changelog/09-15-september-15-web-application-and-api-update Tue, 15 Sep 2026 15:18:20 GMT DNSFilter adds GA Unblock Request Management with CSV export and a redesigned MSP Branding page replacing Whitelabel settings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the `Unblock Requests` page to the dashboard, providing a full request queue with `Allow` or `Deny` actions, threat-category warnings on risky domains, an `Investigate Mode` row action for quick Query Log scoping, and CSV export of active and historical requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Redesigns the `Whitelabel` settings page as a dedicated `Branding` page, exposing `Logo`, `Favicon`, `Dashboard Name`, and `Subdomain URL` as individual, first-class branding objects — new MSPs provisioned after September 15 configure a branded subdomain (`yourdomain.dnsfilter.com`) with current branding defaults. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/09-15-september-15-ios-roaming-client-v145 https://dnsfilter.canny.io/changelog/09-15-september-15-ios-roaming-client-v145 Tue, 15 Sep 2026 13:43:30 GMT iOS Roaming Client v1.4.5 embeds root certs in the MDM profile and reduces background sync to state-change-only.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • The `.mobileconfig` file now includes DNSFilter root certificates alongside the iOS Roaming Client configuration, so a single MDM profile push installs both.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • The `dns_over_tls_enabled` MDM key now accepts `false` from first registration and persists the setting across DNS extension restarts. • Changes to `dhcp_dns_search_domains` now take effect within one configuration refresh with no DNS extension restart required. • The `userName` MDM field now populates the 'Last Logged in User' field immediately on initial device registration. • Registered devices now sync with the DNSFilter dashboard only on device state changes instead of every 60 seconds. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Tue, 15 Sep 2026 13:01:44 GMT DNSFilter MCP Server now GA, letting AI assistants query DNS activity, manage policies, and automate reports via natural language.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the DNSFilter MCP Server integration (generally available), allowing AI assistants such as Claude, ChatGPT, and Codex to query DNS activity and threat data, manage policies and allow/block lists, and automate reports and investigations via the Model Context Protocol — no dashboard navigation required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Exposes MCP Server setup under `Integrations → AI Connectors`; admin copies the server URL from the DNSFilter MCP Server card to connect a client, which stays authorized for seven days before requiring reconnection. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/09-09-september-9-dnsfilter-mcp-server-now-generally-available https://dnsfilter.canny.io/changelog/09-09-september-9-dnsfilter-mcp-server-now-generally-available Wed, 09 Sep 2026 18:28:48 GMT DNSFilter MCP Server is now generally available, letting AI assistants like Claude, ChatGPT, and Codex query DNS data and manage policies in natural language.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the DNSFilter MCP Server integration, reachable under Integrations → AI Connectors, enabling AI assistants (Claude, ChatGPT, Codex) to query DNS activity and threat data, manage policies and allow/block lists, and automate reports and investigations via the Model Context Protocol — no dashboard navigation required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Connected MCP clients stay authorized for seven days before requiring reconnection, and operate under the connecting user's existing DNSFilter permissions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Tue, 08 Sep 2026 07:45:12 GMT DNSFilter makes Dashboards the default landing view, merges filters, adds live status indicators, and improves TLD labeling. • Dashboards is now the default landing view for all users; the legacy Overview page is retired and existing bookmarks redirect automatically. • Merges Quick Filters and Advanced Filters into a single Filters experience in the dashboard Filters drawer, grouped by Source (Organizations, Sites, Roaming Clients/Relays, Users) and Traffic (Result). • Dashboard deployment widgets (Roaming Clients Protected, Sites Protected, Relays, Users, Collections) now show a pulsating green dot with a tooltip to indicate live data not affected by the time range filter. • Bare TLD entries (e.g. `.ru`, `.xyz`) in Allow/Block lists and the Query Log now display as 'Top Level Domain' instead of 'Uncategorized', distinguishing intentional TLD-level rules from genuinely uncategorized domains. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/09-01-september-1-web-application-and-api-update https://dnsfilter.canny.io/changelog/09-01-september-1-web-application-and-api-update Tue, 01 Sep 2026 13:30:48 GMT DNSFilter makes Customizable Dashboards the default landing view and adds live status indicators on deployment widgets. • Customizable Dashboards is now the default landing view for all users; the legacy Overview page is retired and existing bookmarks redirect automatically. • Dashboard Filters drawer merges Quick Filters and Advanced Filters into a single experience, grouped by Source (Organizations, Sites, Roaming Clients/Relays, Users) and Traffic (Result). • Deployment widgets — Roaming Clients Protected, Sites Protected, Relays, Users, and Collections — now show a pulsating green dot indicating live data, unaffected by the dashboard time range filter. • Bare TLD entries (e.g. `.ru`, `.xyz`) in Allow/Block lists and the Query Log now display as 'Top Level Domain' instead of 'Uncategorized', distinguishing intentional TLD-level rules from genuinely uncategorized domains. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Mon, 31 Aug 2026 20:46:35 GMT DNSFilter adds DNS PreCheck v2 as default, 'Does Not Include' query log filter, and dashboard usability upgrades • DNS PreCheck v2 is now the default filtering mode for all Windows Roaming Clients on v3.6 and later, detecting and overriding network-level DNS hijacking (hotel Wi-Fi, captive portals, intercepting ISPs); active devices show `HTTP/2.0` protocol in the DNS query log. • Adds a 'Does Not Include' operator to the Categories filter in the Query Log, letting admins exclude specific categories from view during investigations. • Relay Manager v0.2.2 changes the default config file installation path to a shared system location on Windows, preventing configuration loss when user profiles are removed. • Customizable Dashboard improvements: dashboards in Manage Dashboards now display Private or Shared visibility status, support updates from the quick actions menu, are clickable from the grid, and the Total Requests widget now opens Insights with Allowed Requests pre-toggled on. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/08-25-august-25-web-application-and-api-update https://dnsfilter.canny.io/changelog/08-25-august-25-web-application-and-api-update Tue, 25 Aug 2026 13:42:49 GMT DNSFilter adds 'Does Not Include' category filter in Query Log and improves dashboard usability with shared/private visibility status. • Adds 'Does Not Include' operator to the Categories filter in the Query Log, letting admins exclude specific categories from view during investigations. • Dashboard cards in the Manage Dashboards view now display Private or Shared visibility status and can be updated directly from the quick actions menu. • Dashboards are now clickable directly from the grid view. • Clicking the Total Requests widget now opens Insights with Allowed Requests already toggled on. • Relay Manager v0.2.2 defaults the config file installation to a shared system location for Windows deployments instead of the installing user's profile folder, preventing configuration loss when user profiles are removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Mon, 24 Aug 2026 14:31:02 GMT DNSFilter adds SecureTransit encrypted VPN-layer privacy policy and a redesigned DNSFilter One Agent with full-window UI • New SecureTransit feature enforces DNS-layer traffic encryption through a DNSFilter-managed secure gateway, with a choice of WireGuard or IKEv2 protocols. • SecureTransit policy supports three per-organization or per-device modes: Always On, Manual, or Disabled, configurable from the existing DNS filtering dashboard. • SecureTransit blocks location trackers, mail trackers, data brokers, and ad networks on-path before data leaves the device, on any network. • SecureTransit is available as a per-device add-on with a 14-day free trial for existing customers; no client-side credential setup required. • New DNSFilter One Agent (Windows) replaces the tray right-click menu with a full-window UI themed to system light or dark mode. • DNSFilter One Agent Filtering panel shows protection state, filtering mode, last sync time, and an activity view of blocked and allowed queries over the past hour. • DNSFilter One Agent SecureTransit panel shows connection status, connected server on a map, region, protocol, session uptime, data transferred, and Connect/Disconnect controls (visible when SecureTransit is enabled). • DNSFilter One Agent Settings panel consolidates version, hostname, diagnostics, and logs in one place. • Query Log filters consolidated into a single top-level panel with a unified Apply button, eliminating the need to set filters across multiple locations. • Dashboard widget placement now drops newly added widgets into the next available grid slot without overlapping or displacing existing widgets. • A persistent time range indicator remains visible while scrolling or switching dashboard views. • The destructive 'Reset to Default' option has been removed from the Dashboard Actions menu. Breaking changes: • The 'Reset to Default' option has been removed from the Dashboard Actions menu — any workflow relying on it to reset dashboard layout will no longer find this control. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/08-17-august-17-windows-roaming-client-v3711-beta https://dnsfilter.canny.io/changelog/08-17-august-17-windows-roaming-client-v3711-beta Mon, 17 Aug 2026 18:57:05 GMT DNSFilter Windows Roaming Client v3.7.11 Beta adds SecureTransit encrypted VPN-layer privacy enforcement and a new DNSFilter One Agent UI. • Adds SecureTransit, a policy-enforced encrypted privacy layer supporting `WireGuard` or `IKEv2` protocols, routing traffic through a DNSFilter-managed secure gateway to prevent network-level visibility of destinations on untrusted networks. • Adds admin-controlled SecureTransit policy modes — `Always On`, `Manual`, or `Disabled` — configurable per organization or per device from the existing DNS filtering dashboard. • Adds tracker blocking at the network layer via SecureTransit, cutting off location trackers, mail trackers, data brokers, and ad networks before data leaves the device, on any network. • Introduces the DNSFilter One Agent, replacing the right-click tray menu with a full UI window supporting system light/dark mode, showing protection state, filtering mode, last sync, and an activity view of blocked and allowed queries over the past hour. • Adds a SecureTransit panel in the DNSFilter One Agent displaying connection status, connected server on a map, region, protocol, session uptime, data transferred, and Connect/Disconnect controls. • SecureTransit is available as a per-device add-on with a 14-day free trial for existing customers; installed via the dashboard under `Deployments → Roaming Clients → Beta Channel`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Mon, 17 Aug 2026 09:39:23 GMT DNSFilter adds DNS PreCheck v2 for policy enforcement on DNS-hijacking networks, plus policy dropdown organization headers. • Adds DNS PreCheck v2, which maintains policy enforcement on networks that hijack or redirect DNS traffic, closing a gap where certain network conditions could allow content through that should have been blocked; the agent tray updates to show `DNS PreCheck v2` when active. • Policy/Schedule dropdown now groups an organization's own policies under an 'Organization' header, with sections ordered Organization, Global, then Scheduled, across Sites, Roaming Clients, Relays, Subnets, Users, and Collections. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/08-10-august-10-windows-roaming-client-v3610 https://dnsfilter.canny.io/changelog/08-10-august-10-windows-roaming-client-v3610 Mon, 10 Aug 2026 14:58:34 GMT DNSFilter Windows Roaming Client v3.6.10 adds DNS PreCheck v2 for policy enforcement on DNS-hijacking networks and automatic tray process recovery. • Adds DNS PreCheck v2, which maintains policy enforcement on networks that hijack or redirect DNS traffic; rolls out gradually and is not automatically enabled on upgrade — tray updates to show 'DNS PreCheck v2' to confirm the active mode. • Adds automatic tray process recovery so the system tray process restarts itself if it stops unexpectedly, keeping tray status and controls available without a manual client or machine restart. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Sun, 09 Aug 2026 09:29:07 GMT DNSFilter adds one-click Investigate Mode, a Policies filter in Query Log, customizable dashboards, and Splashtop AppAware support. • Adds Investigate Mode to the Query Log — a one-click control that scopes the log to a specific query's timestamp and deployment context with ±5s, ±10s, and ±15s selectable time windows. • Adds a Policies filter to the Query Log, letting admins scope traffic to one or more active policies alongside existing filters. • Introduces a preview of Customizable Dashboards: build and rearrange widget layouts, apply dashboard-wide filters, save named views with personal defaults, and share views publicly or across an MSP's organizations. • Adds Splashtop to the AppAware application library, enabling policy enforcement and reporting on Splashtop remote desktop traffic. • Adds conflict validation for Universal and Policy Allow/Block lists that surfaces which list takes precedence and what will happen when a domain exists in multiple lists. • Relocates the 'Client admins can create sites' toggle from the Whitelabel page to MSP Settings for improved discoverability. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Sat, 01 Aug 2026 19:07:02 GMT DNSFilter 3.6.10 adds DNS PreCheck v2, Brave SafeSearch enforcement, redesigned SafeSearch controls, and AppAware Sites filter. • Introduces DNS PreCheck v2 for Windows Roaming Client, maintaining policy enforcement even on networks that hijack or redirect DNS traffic. • Adds automatic tray process recovery so the system tray restarts itself if it stops unexpectedly, keeping status and controls available. • Adds Sites filter to AppAware Reporting, giving Core plan and mixed Core/Pro environments query data scoped to specific sites. • Supports SafeSearch enforcement on Brave browser in Filtering Policies, joining Google, Bing, DuckDuckGo, Ecosia, and Yandex. • Redesigns the SafeSearch policy editor section with decoupled enforcement toggles and a new 'Enforce All' shortcut to enable every SafeSearch engine at once. • Adds 'Uncategorized' filter option to the DNS Query Log for surfacing unclassified queries; updates terminology from Blacklist/Whitelist to Block/Allow throughout. • Makes Collections and Users widgets on the MSP Overview page clickable, linking directly to their respective management pages. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/07-29-july-29-windows-roaming-client-v3610-beta https://dnsfilter.canny.io/changelog/07-29-july-29-windows-roaming-client-v3610-beta Wed, 29 Jul 2026 14:53:53 GMT DNSFilter Windows Roaming Client v3.6.10 Beta adds DNS PreCheck v2 with hijack-resistant policy enforcement and automatic tray process recovery. • Adds DNS PreCheck v2, which maintains policy enforcement on networks that hijack or redirect DNS traffic, closing a gap where certain network conditions could allow content through that should have been blocked. • Adds automatic tray process recovery so the system tray process self-restarts if it stops unexpectedly, keeping tray status and controls available without manual intervention. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/07-28-july-28-web-application-and-api-update https://dnsfilter.canny.io/changelog/07-28-july-28-web-application-and-api-update Tue, 28 Jul 2026 14:28:06 GMT DNSFilter adds Brave SafeSearch enforcement, AppAware Sites filter, clickable MSP widgets, and Query Log 'Uncategorized' filtering. • Adds Sites filter to AppAware Reporting, giving Core plan and mixed Core/Pro environments query data scoped by site. • Supports SafeSearch enforcement on Brave browser in Filtering Policies, joining Google, Bing, DuckDuckGo, Ecosia, and Yandex. • Adds 'Enforce All' shortcut in the redesigned SafeSearch policy editor to enable every SafeSearch engine at once; enforcement toggles are no longer nested under 'Block all search engines'. • Enables filtering DNS Query Log by 'Uncategorized' to surface unclassified queries. • Makes Collections and Users widgets on the MSP Overview page clickable, linking directly to their respective management pages. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://feedback.dnsfilter.com/changelog https://feedback.dnsfilter.com/changelog Fri, 24 Jul 2026 16:07:45 GMT DNSFilter redesigns the Query Log with multi-select filters, cross-org switching, and URL-persistent views, plus live local domain sync in the macOS client. • Redesigned DNS Query Log with a top-level filter bar supporting multi-select across Sites, Roaming Clients, Relays, and Users. • MSP admins can now toggle between organizations directly from the Query Log without losing active filters, enabling faster cross-org investigation. • Introduced a custom timeline picker in the Query Log to narrow search windows down to the second. • Active Query Log filters now persist in the URL, enabling bookmarking and sharing of specific filtered views. • New Query Log data columns added: Resolved IPs, Query Type, and Roaming Client OS Type. • Any page in the app can now be set as the default landing page upon login. • Live local domain and resolver sync: configuration changes in the dashboard now apply to the macOS Roaming Client without a daemon restart. • Automatic Registration toggle for Mobile Agent now displays its 7-day duration and explicit end date at a glance. Breaking changes: • Starting with macOS Roaming Client v2.4.4, macOS 13 Ventura or later is required; macOS 12 Monterey is no longer supported. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/07-22-july-22-macos-roaming-client-v244-beta https://dnsfilter.canny.io/changelog/07-22-july-22-macos-roaming-client-v244-beta Wed, 22 Jul 2026 19:25:45 GMT DNSFilter macOS Roaming Client v2.4.4 Beta adds live local domain and resolver sync without daemon restarts. • Enables live sync of local domain and resolver configuration changes from the dashboard without requiring a daemon restart. Breaking changes: • macOS 12 Monterey is no longer supported; v2.4.4 requires macOS 13 Ventura or later. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/07-21-july-21-web-application-and-api-update https://dnsfilter.canny.io/changelog/07-21-july-21-web-application-and-api-update Tue, 21 Jul 2026 15:05:11 GMT DNSFilter redesigns the Query Log with multi-select filters, cross-org toggling, second-level timelines, and shareable URLs. • Redesigned DNS Query Log with a top-level filter bar supporting multi-select across Sites, Roaming Clients, Relays, and Users. • MSP admins can now toggle between organizations directly from the Query Log without losing active filters, enabling faster cross-org investigation. • New custom timeline picker lets analysts narrow Query Log search windows down to the second. • Active filters persist in the URL, making Query Log views bookmarkable and shareable. • New Query Log data columns added: Resolved IPs, Query Type, and Roaming Client OS Type. • Any page in the app can now be set as a custom default landing page, opened automatically upon login. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/07-15-july-15-identities-connections-release https://dnsfilter.canny.io/changelog/07-15-july-15-identities-connections-release Wed, 15 Jul 2026 18:20:59 GMT DNSFilter Identities framework adds direct Entra ID/SCIM integration, rebuilt Collections, and MSP-level identity management. • New Identities framework in the DNSFilter dashboard unifies users, collections, and policy assignment across identity sources for enterprise and MSP environments. • Direct Microsoft Entra ID integration via SCIM provisioning eliminates the AD Sync Tool dependency, with support for Entra Hybrid environments. • Rebuilt Collections engine supports large directories, multiple identity sources, and high-complexity group structures. • New unified Identities view gives administrators a consolidated picture of all identity sources, user objects, collections, and policy assignments. • MSP dashboard now supports managing Users, Collections, and Identity Connections across all organizations from a single view, without navigating into each organization individually. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/7-14-july-14-ios-roaming-client-v144 https://dnsfilter.canny.io/changelog/7-14-july-14-ios-roaming-client-v144 Tue, 14 Jul 2026 15:19:46 GMT iOS Roaming Client v1.4.4 adds automatic MDM site reassignment, stronger admin PIN protection, and refreshed branding. • Supports syncing user name, hostname, and device tag changes from MDM configuration profiles to the Dashboard without requiring a Site Secret Key change. • Enables automatic site reassignment when a Site Secret Key changes in the MDM configuration profile, allowing fleet migrations without reinstalls or policy gaps. • Adds progressive delays between incorrect admin PIN attempts to make automated guessing impractical while keeping legitimate retries fast. • Refreshes app icons, visuals, and UI elements to match current DNSFilter branding. • Enables diagnostic logging by default on new installs so Support can diagnose early issues from first run. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/07-14-july-14-web-application-and-api-update https://dnsfilter.canny.io/changelog/07-14-july-14-web-application-and-api-update Tue, 14 Jul 2026 14:56:46 GMT DNSFilter adds CyberSight Data Export for SIEM integration and clearer Mobile Roaming Client auto-registration status display. • Adds CyberSight Data Export to all Data Export customers, enabling SIEM ingestion of CyberSight data alongside existing DNS log exports. • Automatic Registration setting now surfaces its 7-day duration and an explicit 'Ends on [date]' status for Mobile Roaming Client, replacing the previous helper text. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/06-30-june-30-web-application-and-api-update https://dnsfilter.canny.io/changelog/06-30-june-30-web-application-and-api-update Tue, 30 Jun 2026 13:54:47 GMT DNSFilter Partner Portal relaunched with magic-link access and local lesson progress tracking. • New DNSFilter Partner Portal with modernized experience, magic-link email verification (no account creation or SSO required), and device-local lesson progress saving. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/06-24-june-24-web-application-and-api-update https://dnsfilter.canny.io/changelog/06-24-june-24-web-application-and-api-update Wed, 24 Jun 2026 14:48:30 GMT DNSFilter adds a CyberSight Agent compatibility warning banner to flag outdated Roaming Client versions. • New compatibility warning banner in CyberSight alerts when the Roaming Client version on a device is incompatible with the current CyberSight feature set, prompting an upgrade before relying on CyberSight data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/06-23-june-23-macos-roaming-client-v242-production https://dnsfilter.canny.io/changelog/06-23-june-23-macos-roaming-client-v242-production Tue, 23 Jun 2026 15:13:42 GMT macOS Roaming Client v2.4.2 adds component version mismatch detection to catch post-upgrade inconsistencies. • Adds component version mismatch detection: alerts users when the menu bar app, system extension, and daemon are running mismatched versions — with an in-menu resolution option. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/06-15-june-15-windows-roaming-client-v3423-production https://dnsfilter.canny.io/changelog/06-15-june-15-windows-roaming-client-v3423-production Mon, 15 Jun 2026 19:42:34 GMT Windows Roaming Client v3.4.23 adds automatic Loopback mode fallback on Windows Server and more consistent device identification. • Adds automatic fallback to Loopback filtering mode when installed on Windows Server OS, preventing unexpected behavior on unsupported Server deployments. • Improves device identification consistency in the dashboard, reducing duplicate entries caused by missing identifiers after upgrades or reinstalls. • Enhances installer prerequisite validation and upgrade handling so failed upgrades no longer leave endpoints without the Roaming Client. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter https://dnsfilter.canny.io/changelog/06-15-june-15-macos-roaming-client-v242-beta https://dnsfilter.canny.io/changelog/06-15-june-15-macos-roaming-client-v242-beta Mon, 15 Jun 2026 18:13:27 GMT macOS Roaming Client v2.4.2 Beta adds component version mismatch detection to surface upgrade and MDM install issues. • Adds component version mismatch detection that alerts users when the menu bar app, system extension, and daemon are running different versions — with an in-menu resolution option. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dnsfilter