Recommend cloud DNS for content filtering in the company

Question

Domain Name System

I found only 3 products:
www.umbrella.com/
www.skydns.ru/
usergate.ru/cloudsolutions/gatewall_dns_filter.php

Umbrella is the most advanced among them, but also the most expensive. For 30 computers a year, you will have to pay about $ 1,000.
Our products are cheaper, but the functionality is not impressive.

The company has more than 20 computers (Win, Os X, Ubuntu), several offices, and different computers require different levels of access - “our” products cannot filter like this :( I was

looking for a hardware solution - I found it from Zyxel - but they also require a monthly fee. And I just need to restrict access to a number of sites (but this restriction will be different for different groups, so just blocking sites on the modem for everyone is not suitable).

PS Server solutions inside offices are also not suitable for such a small task :( Now in one of the offices there is UserGate (previous generation) on Windows, and the results of its work are not very encouraging - everything lags with it :(

Answer 1

I don't see anything here that can't be done by hand.
We take the simplest cloud machine in AWS, raise openvpn, configure it with certificates, forward the port. Further, according to the instructions, we configure clients, they pick up certificates themselves and connect.
We set up a dns server on the machine and set its internal openvpn address on the machines. All…

Answer 2

And if you approach from the other side and use Kaspersky Anti-Virus for this? And anti-virus protection and control of a workplace with division on users, computers.

Answer 3

there is also rejector.ru

Answer 4

SkyDNS puts a client on the computer, but it's not just a client, it's also a DNS proxy. Only it does not just proxy, but also adds a token to the request, by which the client and its filters are determined.

Answer 5

Why don't you consider using a proxy? There is a division into groups, even by ip, even by mac, even by a bunch of login / password.

Answer 6

I will say on SkyDNS - "our products" can do everything.
You can install an agent on a computer, respectively, you can bind the filtering profile both to the computer itself and even to individual users.
You can bind a profile to a router, gateway, proxy, but all computers behind them, respectively, will have the same filtering settings.
If you use ZyXEL Keenetic with the SkyDNS module, then, as in the case of an agent, you can attach your filtering profile to each device behind the router (not only a PC, but anything else).
Umbrella is advanced, but not at all.

Answer 7

Here is another option NetPolis . Now there is a 60-day trial period, enough time to get acquainted with the service.