Securly Filtering - How to choose the right filtering method

Overview

Securly offers a variety of filtering methods and tools. This article outlines the recommended use cases and provides examples of when an where to use each of our filtering methods so that customers, IT Team and Managed Service Provides can make the right choice for their environments.

The filtering methods this article covers are as follows:

1. Guest DNS .
2. SmartDNS.
3. SmartPAC (Proxy Auto Configuration Script).
4. Extension.

This article does not cover Securly Policy configuration or 3rd Party Configurations. Please see our Deployment Section for how to implement each of these filtering methods.

For a comparison and compatibility list of our filtering methods please see this KB.

For an overview of how to approach BYOD filtering Please see this KB.

Guest DNS

Guest DNS is for use cases where there is no device management outside of basic network settings (IP, Subnet, DNS Servers). Guest DNS filtering provides domain blocking only and does not provide search term monitoring, MiTM Inspection or user authentication. The Guest DNS does not require a certificate to be installed.

Key Features:

• Domain Blocking.
• Safe Search Filtering.
• Youtube Strict Restriction Mode Enforcement.

Example use cases:

• Parent WiFi Networks.
• Public WiFi Networks.
• Unmanaged WiFi Networks.

How to enable Guest DNS please see this KB.

SmartDNS

SmartDNS is for use cases where there is little device management and user logging is required. This is the main differentiator between SmartDNS and Guest DNS however there are others.

To find your SmartDNS servers please see this KB.

The SmartDNS Requires that the Securly SSL Certificate is installed on devices which can be downloaded and installed here.

Key Features:

• Keyword Scanning (MiTM).
• Custom search term filtering.
• Standard Youtube Controls.
• User Authentication.

Example use cases:

• Managed or unmanaged BYOD devices.
• Chromebooks(where the extension is not suitable).
• Desktops such as Mac and Windows.

SmartPAC

SmartPAC Overview

The Securly SmartPAC is a Proxy Auto-Configuration script that is configured on a devices proxy settings. The SmartPAC is very flexible and can be used on most devices and operating system. The SmartPAC can be configured via various MDMs, Group policy, Intune and Google Workspace.

The SmartPAC Requires that the Securly SSL Certificate is installed on devices which can be downloaded and installed here.

In use cases where Browsers are managed it is recommended to use the Extension rather than the SmartPAC.

For a more in-depth look at how the SmartPAC operates please see this KB.

To find your SmartPAC URL please see this KB.

Key Features:

• Keyword Scanning (MiTM).
• Custom search term filtering.
• User Authentication and Transparent authentication (With User-injection).
• Off-Campus Filtering.
• Standard Youtube Controls.
• Uncategorized Site Blocking.
• Not limited to specific networks like DNS.

Example use cases:

• Suitable for Managed Device Environments(MDM, GPO, Intune, Google Workspace)) where the devices themselves are managed such as school networks.
• Managed iPad or  environments.

SmartPAC User-injection:

The SmartPAC can be used with a user-injection function which injects a username as a UPN(username@example.com) to Securly Proxy Servers to authenticate devices with Securly based on who is using the device.

To find out how to configure the SmartPAC with user-injection please see this KB.

Extension:

The Securly extension supports the Chrome and Edge browsers on MacOS and Windows, as well as Chromebooks and it provides the most features of any of our filtering methods. The Securly Extension is also the least intrusive on networks. It can be deployed via, Group Policy, Intune, or Google Workspace depending on the device and SSO available.

The Extension does not require the Securly Certificate from being installed.

For a more in-depth look at how the extension works please see this KB.

Key Features:

• Keyword Scanning.
• Custom search term filtering.
• Transparent authentication by viewing the user signed in use on the browser.
• Off-Campus Filtering.
• Uncategorized Site Blocking.
• Google Chat Scanning.
• Think Twice (Securly Aware).
• Wellness Widget (Securly Aware).
• Full Logging Capabilities.
• Full YouTube Controls.

Example use cases:

• Suitable for Managed Device Environments(MDM, GPO, Intune, Google Workspace)) where the devices themselves are managed such as school networks.
• Managed iPad or  environments.

To find out how to install the Extensions please see this KB.