DNS Filtering for Remote Employees
Protection shouldn't stop when staff leave the office. Here is how to extend DNS security to remote work.
Office-based DNS filtering protects devices while they are on the company network. When employees work from home, cafés or hotels, those devices use other networks — and the protection disappears unless you extend it.
Why remote devices need protection
Remote employees face the same phishing and malware threats, often on less secure home or public networks. A compromised laptop can bring infections back to the office.
Roaming clients
Lightweight roaming agents installed on laptops send DNS queries to the protective service wherever the device is. Policies follow the user.
VPN routing
If employees connect through a VPN, DNS queries can be routed through the company network and filtered there. This works when the VPN is always connected.
Encrypted DNS
Modern options support encrypted DNS protocols, protecting queries from snooping on public Wi-Fi while maintaining filtering.
Policy consistency
Apply the same security categories to remote and office users, with flexible productivity rules if needed.
Reporting
Remote device activity appears in the same reports, giving a complete view of threats.
Mobile devices
Company phones and tablets can be protected through device management or DNS profiles.
Privacy considerations
Explain to employees what is filtered and how logs are used, especially on devices used at home.
Combine with endpoint security
DNS filtering complements endpoint protection, patching and secure access tools.
The bottom line
Security should travel with your employees. Extending DNS filtering to remote devices closes a significant gap in hybrid work.
Learn more about Cloud DNS & Web Filtering from UbiFi, or talk to our team.
Protective DNS that blocks phishing, malware and unwanted content for every device on your network — no software to install.
