About DNSWatchGO Client

DNSWatchGO Client is an application that you install on portable computers that leave your network, such as employee laptops, including Windows Virtual Desktop. The client simultaneously forwards DNS requests to the DNSWatch servers and the upstream DNS resolvers. DNSWatch servers compare the requested domain to the lists of malicious domains in the Domain Feed and to domains in filtered categories.

If the requested domain is not on the known malicious domains list or on the filtered domains list, the requested content appears.

If the domain is a known threat or filtered content:

  • DNSWatchGO Client returns the block page content.
  • If the requested content links to a malicious domain, DNSWatch gathers more information about the threat.

Access to a website is blocked if either the content filtering policy assigned to the Firebox blocks the site, or if the DNSWatchGO Client policy blocks the site. If the website is blocked by both, the logging and reporting in the cloud logs the event as blocked by the DNSWatchGO Client.

DNSWatchGO Over VPN

DNSWatchGO is compatible with most split tunnel VPNs.

DNSWatchGO is fully compatible with these WatchGuard Mobile VPN types:

  • IKEv2
  • SSL/TLS
  • L2TP
  • IPSec

DNSWatchGO is also fully compatible with these third-party VPN clients:

  • Express
  • SonicWall
  • Fortinet
  • Sophos
  • Check Point

DNSWatchGO Client Process

As part of the DNSWatchGO Client installation, all Internet Protocol (IP) enabled adapters on the host computer have their DNS servers configured to localhost. The original configured DNS settings are saved in the DNSWatchGO Client as the upstream DNS servers.

Screenshot of DNSWatchGO Server Settings

Screenshot of the DNSWatchGO Client Process

The DNSWatchGO Client listens on localhost port 53 (both TCP and UDP) and intercepts DNS requests. When it receives a request, DNSWatchGO Client:

  • Sends a query to DNSWatch to determine whether the domain is blocked.
  • Sends a request for the IP address of the domain to the upstream DNS servers, based on the original DNS server configuration on the host (dynamic or manually configured DNS servers).

After DNSWatch sends the response:

  • If the response is block or filter, the DNSWatchGO Client returns the block page.
  • If the response is Allow or Allowlist, the DNSWatchGO Client returns the requested content provided by the upstream DNS server.

To watch a video tutorial about DNSWatchGO, go to Get Started with DNSWatchGO.

Related Topics

Download and Install DNSWatchGO Client

Monitor DNSWatch Service Status

Manage DNSWatch