Version 3.8.15 of the Windows Roaming Client is now available on the . To install, download the latest beta installer from the dashboard under .

– MSPs without a custom domain configured now have access to the new Branding settings page, replacing the legacy Whitelabel form. Existing logos carry over automatically — no re-upload required.

– The Query Log now uses cursor-based pagination, replacing page-number paging. Navigation moves forward and back through results with stable, reliable loads.

– Two filter improvements across deployment and policy grids: the Add Filter button now disables automatically once all available filters have been applied, and the redundant Filters option has been removed from grids where the search bar already covers all filtering (Policies, Allow List, Block List, and Universal Lists).

– The Category column in the Unblock Requests grid now shows domain category information even when a domain was blocked for a non-category reason (such as a Block List, AppAware, or Security block), giving admins more context when reviewing requests.

– The license overage warning and critical banners are now visible on Custom Dashboards, restoring alert visibility that was lost when the legacy Overview page was retired.

🪲

– Resolved an issue where previewing a custom Block Page displayed the default DNSFilter block page instead of the configured one, omitting the organization's logo, name, and Unblock Request button.

– Resolved an issue where opening any Block Page edit view immediately activated the Save and Discard buttons — even with no changes made — prompting an "unsaved changes" warning on every navigation attempt.

– Resolved an issue where net-new MSPs using the Branding settings page saw the default DNSFilter logo on Scheduled Reports instead of their uploaded logo.

Plus general performance and stability improvements across the dashboard.

Version 2.4.6 of the macOS Roaming Client is now available on the channel. This release brings together every update from the 2.4 Beta series (v2.4.0 through v2.4.6). To install, download the latest production installer from the dashboard under . Auto-upgrades will roll out gradually.

v2.4.6 checks for the new certificate. Devices that still have the previous certificate profile will show a prompt in the menu bar after upgrading.

To clear the prompt, download the updated (or the branded or white-label profile you deploy) from the Prerequisites section of the macOS Roaming Client install guide and push it through your MDM. The updated profile replaces the installed one in place. We recommend pushing it before auto-upgrade reaches your devices.

⚠️ The macOS Roaming Client now requires macOS 13 Ventura or later.

Plus general performance and stability improvements across the dashboard.

Version 2.4.6 of the macOS Roaming Client is now available on the . To install, download the latest beta installer from the dashboard under .

– Devices using encrypted DNS now keep DNSFilter filtering enforced while a corporate VPN is connected, even when the tunnel blocks the DNS-over-TLS port. Filtering continues over DNS-over-HTTPS, so remote and hybrid users stay protected on VPN without giving up encrypted DNS. Turn it on per install with ; see the deployment guide for setup and network requirements.

– The published macOS certificate profiles now install all DNSFilter roots in a single push, including the new DNSFilter Root CA G1. Re-download the profile you already deploy and push it, and it replaces the installed one in place.

– Install-time configuration keys now use the same Travel Wi-Fi naming as the dashboard and documentation. Existing scripts keep working with the previous names.

– Admins can now manage user-submitted unblock requests directly from the dashboard. The new Unblock Requests page provides a full request queue with tools to Allow or Deny submissions, threat-category warnings on risky domains, an Investigate Mode row action for quick Query Log scoping, and CSV export of active and historical requests.

– The Whitelabel settings page has been redesigned as a dedicated Branding page, with Logo, Favicon, Dashboard Name, and Subdomain URL now managed as individual, first-class branding objects. Net-new MSPs onboarded after September 15 configure a branded subdomain (yourdomain.app.dnsfilter.app) and are set up with current branding defaults without legacy Whitelabel configuration.

– In-app copy in the Local Domains and Resolvers section now clearly notes that Local Domains and Resolvers only apply in Classic DNS Filtering Mode — Roaming Clients configured in Custom or PreCheck mode do not require local domain configuration.

– Read-only and policy-only users now see the Roaming Client installer as disabled with a clear tooltip explaining that elevated permissions are required, rather than having full access to the installer download.

– Resolved an issue where the Roaming Clients Protected and Relays widgets on organization-level dashboards did not update when filtering by Site.

– Resolved an issue where an organization filter applied on the MSP-level Custom Dashboard could carry over when navigating into an organization's dashboard, causing it to display filtered data rather than data scoped to that organization. Navigating to any organization dashboard now correctly scopes data to that organization.

Plus general performance and stability improvements across the dashboard.

A new version of the iOS Roaming Client is now available in the App Store and will begin rolling out to devices via Apple auto-updates today.

This release includes improvements to MDM configuration handling and device registration.

– Connect an AI assistant to DNSFilter through the Model Context Protocol and work with your DNS data in natural language. A connected client can query DNS activity and threat data, manage policies and allow/block lists, and automate reports and investigations, without navigating the dashboard. Claude, ChatGPT, and Codex are all supported.

Find it under . Open the DNSFilter MCP Server card, copy the server URL, and follow the MCP Server setup guide to connect your client. Setup is admin-only, and once connected, the assistant sees exactly what the connecting user's permissions allow, nothing more. A connected client stays authorized for seven days before prompting to reconnect.

Available on eligible plans. Check the setup guide for package eligibility.

Plus general performance and stability improvements across the dashboard.

– The legacy Overview page has been retired and Dashboards is now the default landing view for all users. Existing links and bookmarks to the Overview page redirect to Dashboards automatically.

– The dashboard Filters drawer has been simplified and reorganized. Quick Filters and Advanced Filters have been merged into a single Filters experience, with filters now grouped by Source (Organizations, Sites, Roaming Clients/Relays, Users) and Traffic (Result). The time range control remains on the main dashboard view.

– Dashboard widgets showing current deployment counts — Roaming Clients Protected, Sites Protected, Relays, Users, and Collections — now display a pulsating green dot to indicate they reflect live data and are not affected by the dashboard time range filter. Hovering the dot shows a tooltip confirming this.

– Bare TLD entries (e.g. .ru, .xyz) in Allow/Block lists and the Query Log now display as "Top Level Domain" instead of "Uncategorized," making it easier to distinguish intentional TLD-level rules from genuinely uncategorized domains.

– Resolved an issue where the search box on the Top Domains dashboard widget only filtered the domains already loaded on screen, returning "No results" for any domain outside the top 20 even when traffic existed. The search now queries all traffic in the selected time range.

Plus general performance and stability improvements across the dashboard.