Safe Browsing for Schools: How DNS Filtering Protects Students

Schools have a duty to keep students safe online. With smart classrooms, computer labs, tablets and students' own phones all connected to the school network, filtering content device by device is impractical. DNS filtering protects every device at once.

How DNS filtering works

Every time a device opens a website, it first asks a DNS server to translate the name into an address. A filtering DNS service checks each request against categories and threat lists. If the site is harmful or inappropriate, the request is blocked and a friendly message appears instead.

What it blocks

• Adult and explicit content
• Violence, gambling and drugs
• Malware, phishing and scam sites
• Proxy and anonymiser services used to bypass filters
• Any additional categories the school chooses

No software to install

Because filtering happens on the network, it covers lab computers, smart boards, tablets and student phones without installing anything on them.

Fast and unobtrusive

DNS lookups are tiny and well-run filtering resolvers respond quickly, so students and teachers notice no slowdown.

Prevent bypassing

Configure the firewall so devices can only use the school's DNS service, and block known DNS-over-HTTPS services that could avoid filtering.

Part of a wider safety approach

Filtering supports, but does not replace, digital citizenship education, supervision and clear acceptable-use policies. Students also need to learn how to handle content they encounter elsewhere.

Reports for leadership

Regular reports show what was blocked and help demonstrate that the school is meeting its safeguarding responsibilities.

The bottom line

DNS filtering is a simple, effective foundation for safe browsing in schools. UbiFi Cloud DNS for education protects every device on campus.

Learn more about Cloud DNS for Campuses from UbiFi, or talk to our team.