
Other options could also be using something like a Watchguard firewall and the Authentication app on remote systems. You could use a DNS Proxy like cisco umbrella client or you could force DNS to places like Cloudflare or OpenDNS and control DNS filters all online. Webroot has been very sound in those areas.Īs for DNS there are tons of options. but always had tons of issues with them such as network deployment issues and false postives etc. I have experience as an MSP for a larger company and we used tons of other AV products like AVG, Norton etc. Kinda curious but why do you want to leave from Webroot? I'm a small MSP shop and use Webroot as well. But if you were on-premise with desktops DNSFilter, or even NextDNS.io is good to just using internal DNS as forwarders with nothing installed on every device.

We liked DNSFilter but with over 30% of our clients on laptops and a decent % of those travelling, we didn't want to have multiple solutions in place. We use Todyl which has an amazing content filter, its part of their larger strategy and as a stand-alone item would be too pricey IMO, but you can just 'buy' that one item if you wanted. Zorus, which we used to use, proxies the DNS on the device no matter what DNS you are using so theirs works.

Keep in mind if you have traveling users, DNSFilter and NextDNS and other filters that use localhost or dedicated DNS are going to break in hotels / airports or anywhere there is a wifi portal because they cant resolve - now when the person calls you can have them put the ip in of the gateway, but not a real solution.
