FAQs GoGuardian DNS
What does DNS stand for?
Domain Name System. A system that ties domain names to IP addresses. To learn more about GG DNS, click here.
Does GoGuardian DNS work on iPads?
Yes. The main objective of GoGuardian DNS is to be a device-agnostic filtering solution. GG DNS does not require any software to be installed on devices since it works at the network level. All devices routed through GG DNS will be supported regardless of their operating system (e.g. iOS, macOS, Windows, etc.). iPads, Kindles, Windows devices, tables, iphones and Android devices are all supported.
What is AdDeflect™?
A premium feature within GoGuardian DNS. AdDeflect has the power to block ads and pop-up ads from the majority of websites and YouTube, shielding students from distractions. This feature eliminates user tracking which increases students’ privacy. To learn more about AdDeflect, click here.
Who would benefit the most from GoGuardian DNS?
GoGuardianDNS is designed for K-12 schools tired of managing and upgrading their physical filtering hardware and who want a scalable and unified cross-platform content filtering solution. GG DNS provides a unified solution including a device-agnostic network-level cloud-based inline filtering, all managed and monitored through a single user-friendly interface.
Is GoGuardian DNS going to replace GoGuardian Admin?
No. GoGuardian DNS will be offered in addition to GoGuardian Admin. However, GG DNS can be accessed through GGAdmin’s dashboard for ease of use during on-going management.
What is the difference between GG DNS and GG Admin?
GoGuardian DNS is a network-level filter, designed to support all devices connected to the network. GG DNS is device agnostic, so as long as a school’s users are on school premises and connected to the school network, they're protected by GG DNS. Any connections outside the school gateway (such as their home, or any public network), will be unfiltered.
GoGuardian Admin protects user browsing regardless of the network they are connected to. GG Admin customers deploy the GoGuardian Extensions via Google Admin console to users who should be monitored. When students are logged into the browser, administrators can filter and monitor their activity. Unique features of GoGuardian Admin include Smart Alerts, Smart Rules, Youtube filtering, associating browsing activity to an individual user, and blocking and allowing custom URLs with a path. Another advantage is its ability to apply filtering policies to individual students as well as run reports on individual students.
To learn more about the difference between GG DNS and GG Admin filtering, please click here.
Do I have to maintain two different sets of policies, one for GoGuardian Admin and one for GoGuardian DNS?
No. GoGuardian DNS can use your any current policies defined on GoGuardian Admin. However, there are some limitations with filtering that are described here.
What are the filtering limitations of GoGuardian DNS compared to GoGuardian Admin?
GoGuardian Admin can block at the URL level (i.e. sites.google.com/unblockedgames.) While this same URL can be configured for filtering by GG DNS,[ it will be blocked at the domain level (i.e. all of www.test.com will be blocked). ] it will not be blocked at the domain level. GG DNS will ignore that URL because if it blocked the domain, it would block all sites.google.
Does GG DNS decrypt SSL traffic?
Unlike inline filters that require a physical appliance to sit between a school’s network and the internet, GG DNS is a network level filter. DNS will check the domain name only and SSL decryption is not needed.
Where do I plug-in the IPs for our resolvers? (example: DNS Forwarders Tab or adjust the DHCP scope.)
Use the DNS Forwarders tab for an internal DNS server (Windows Server) or any internal resources your workstations have to access. Most common internal resources are print servers or software hosted on internal servers.
Adjust the DHCP scope if there are no internal resources required - most common on BYOD or Guest networks.
Can my teachers, students, and guests have different policies applied?
Yes, it is possible to apply different policies to different internal networks. This would require additional administration of your network traffic through your router (such as a LAN/VLAN or different SSID). As long as you get separate public IP Addresses from your ISP, you can apply different filtering policies to those different, internally segmented networks.
Can GG DNS block Direct IP addresses?
Due to the nature of DNS filtering, blocking direct IP addresses is not possible as no DNS request is made when a user types in a direct IP address. However, the majority of sites will redirect to their domain in order to benefit from SSL encryption. As soon as that redirection takes place, a DNS resolution will occur and the policy blocking facebook.com would be effective. For example, if you visit http://18.104.22.168/, you’ll see that it redirects to https://www.facebook.com
What customer problems does GoGuardian DNS solve?
- Scalability issues with physical inline filters
- Upfront costs and maintenance costs associated with physical appliances
- Out-of-sync filtering policies resulting from separate solutions
- Excessive management of policies required by multiple solutions
- Device-agnostic filtering, including for BYOD programs and guest networks
- Complicated user interfaces
- Integrates seamlessly with other GoGuardian products
- CIPA / FERPA compliance
I have a GG DNS Feature Request. Where can I submit it?
Please submit all GG DNS Feature Requests here.
Can I purchase GoGuardian DNS on its own if I already have a filtering solution I am happy with?
GoGuardian DNS will be available for purchase separately. Please contact our sales team for more information.