WatchGuard DNSWatchGO is a cloud-based DNS filtering and security service. It blocks phishing sites, malware and ransomware delivery, and command-and-control callbacks at the DNS layer, before a connection to a malicious server is made. It's built to protect users whether they're on the corporate network or working remotely, it doesn't require a Firebox, and it's managed entirely in WatchGuard Cloud.

DNSWatch on a WatchGuard Firebox only protects users who are on the corporate network and routing traffic through that appliance. DNSWatchGO extends DNS-layer protection to users working off-network, whether they're at home, traveling, or connecting from a coffee shop. No VPN tunnel back to the office is required for DNSWatchGO to work.

Yes. DNSWatchGO is built for off-network users. A lightweight client on the endpoint sends DNS queries through WatchGuard's cloud filtering no matter where the user connects from, with no dependency on a VPN or a corporate firewall. The client currently supports Windows and ChromeOS devices.

DNSWatchGO blocks connections to malware distribution sites, ransomware delivery infrastructure, phishing pages, and command-and-control servers. Because blocking happens at DNS resolution, the endpoint never connects to the malicious destination. When a user clicks a phishing link, they're redirected to a short training page on the warning signs of phishing. Content filtering with 130 predefined categories also lets admins restrict risky or off-policy websites by user or group.

DNSWatchGO is licensed per user, with 1 and 3 year terms available. Licenses are managed in WatchGuard Cloud and can be scaled up as your user count grows. DNSWatchGO is also included in WatchGuard Passport alongside AuthPoint MFA and endpoint security. Contact our team for volume pricing or help choosing between DNSWatchGO and Passport.