FirewallDNS

    DNS Setup Guides

    Point your network at FirewallDNS in minutes. Pick your vendor for step-by-step instructions, CLI commands and tips to stop devices from bypassing the filter.

    Enterprise Firewalls

    Fortinet FortiGate

    FortiGate can use FirewallDNS for its own lookups and hand it to clients through DHCP or the built-in DNS proxy.

    Palo Alto Networks (PAN-OS)

    Set FirewallDNS as the upstream for the PAN-OS DNS proxy and for the management plane.

    Cisco ASA / Firepower (FTD)

    Set FirewallDNS on the ASA DNS server group and DHCP scope.

    Check Point Quantum

    Configure DNS in Gaia and DHCP for clients.

    Juniper SRX

    Set Junos name servers and DHCP propagation.

    Sophos Firewall (XG / XGS)

    Sophos Firewall uses the DNS settings under Network for itself and DHCP.

    SonicWall

    Configure SonicOS DNS and DHCP scopes.

    WatchGuard Firebox

    Set network DNS in Fireware Web UI or Policy Manager.

    Network Equipment

    Cisco IOS / IOS XE Routers

    Configure the router as DNS forwarder and DHCP server handing out FirewallDNS.

    Cisco Meraki MX

    Meraki hands out DNS through the DHCP settings of each VLAN.

    HPE Aruba (Instant On / Central)

    Aruba hands out DNS through the network/DHCP settings.

    Ubiquiti UniFi

    Change DNS per network or on the WAN in UniFi Network.

    Ubiquiti EdgeRouter (EdgeOS)

    Configure EdgeOS DNS forwarding.

    MikroTik RouterOS

    Set MikroTik DNS and the DHCP network.

    Zyxel (USG FLEX / ATP / NWA)

    Set DNS on the Zyxel interfaces and DHCP.

    DrayTek Vigor

    Configure DNS in the LAN DHCP settings.

    Open Source

    pfSense

    pfSense runs Unbound as DNS resolver. Switch it to forwarding mode with FirewallDNS upstream.

    OPNsense

    OPNsense uses Unbound; configure query forwarding.

    Home Routers and Mesh

    NETGEAR (Nighthawk / Orbi)

    Change DNS in the internet settings.

    TP-Link (Archer / Deco / Omada)

    TP-Link offers DNS settings in the web interface and apps.

    ASUS (RT / ZenWiFi)

    ASUSWRT supports WAN DNS and DNS Director.

    AVM FRITZ!Box

    FRITZ!Box can use other DNSv4 servers.

    Linksys (Velop / Smart Wi-Fi)

    Change DNS under Connectivity.

    Google Nest Wifi

    Use the Google Home app.

    Amazon eero

    Use the eero app.

    Starlink

    The Starlink router does not allow custom DNS. Use bypass mode with your own router.

    Windows Server and Azure

    Microsoft Active Directory (Windows Server DNS)

    In an Active Directory domain, clients must keep using your domain controllers for DNS so logons and Group Policy work. Instead of changing the clients, point the DNS forwarders on every domain controller to FirewallDNS. Internal AD zones still resolve locally, and every external lookup is filtered.

    Windows Server DHCP

    For networks without Active Directory DNS, hand out FirewallDNS directly through Windows DHCP option 006.

    Microsoft Azure & Entra ID

    Entra ID (formerly Azure AD) is an identity service and has no DNS settings of its own. DNS for Azure workloads is configured on the virtual network (VNet), on domain controllers running in Azure, on Microsoft Entra Domain Services, or through Azure DNS Private Resolver. Pick the scenario that matches your setup.

    Devices and Operating Systems

    Set up FirewallDNS on a single computer, phone, browser, TV or console. To protect every device at once, use a router guide above.

    New to DNS filtering? Start with What is a DNS firewall?, check the glossary or see pricing.