TABLE OF CONTENTS

Deledao's DNS protection can easily filter all the devices, including guest devices, on your network. It's automatically enabled if the public-facing IP addresses of the school are registered with us. Our DNS server IP addresses can be obtained on admin console -> Deployment -> Guest Devices Protection.


There are 2 ways of using our DNS solution: Network based and PAC URL based solution


Network Based Solution

This requires pointing the DNS server of a network to our DNS servers. Detailed instructions can be found on Deledao's Admin Console > Deployment tab > Guest Devices Protection. For this solution, only the Default rule can be used for filtering, and users will have their identity shown as "School Student" as Deledao doesn't know the user ID.


If our DNS servers are set on your campus-wide network, not just the guest wifi network, the DNS solution will preempt the Chrome extension in terms of blocking. For instance, if the social network category is blocked and a student attempts to visit facebook.com, the student's search will be stopped by Deledao's DNS server before the extension kicks in. In this case, it will also be logged as “School Student”.

DNS Rules

By default, the "Default rule" under policy manager will be used for DNS filtering. When your school has multiple public IPs and would like to have different DNS rules based on IPs, "Use DNS rules" can be turned on, and admin can create different rules for each IP as shown below




Limitations

  • DNS solution cannot do text, image or video filtering. 

  • Filtering is based on the domain name, i.e. Deledao will determine which domains to block by using a pre-existing category domain name list and realtime AI analysis won't be enabled, thus there isn't the function of determining whether new sites fall into that blocked category. 
  • It is recommended to install our certificate into the device, otherwise there might be a warning in the browser regarding untrusted certificate. Blocking will still happen no matter if the certificate is installed, and the difference is whether the blocking page can be presented without a warning for HTTPs websites.



© Deledao Education