We've released to address a DNS restoration issue affecting machines with multiple static DNS servers configured.

– Fixed an issue where only the primary DNS server was restored when the agent service stopped on machines with multiple static DNS servers. Secondary DNS servers were silently dropped, leaving affected machines with an incomplete DNS configuration.

All configured DNS servers are now correctly restored when the agent stops or restarts.

A new bulk in-line editing tool in the allows administrators to apply settings directly to individual agents. Supported actions include:

This provides greater flexibility for managing device-specific configurations.

The Overview page now displays both in the footer. Selecting opens a drawer showing all resolver IPs grouped by Primary and Secondary, with quick copy-to-clipboard functionality.

Plus general performance and stability improvements across the platform.

We've released to address a critical network connectivity issue affecting machines with static IP/DNS configurations.

– Fixed an issue where the agent incorrectly overwrote static IP/DNS configurations on restart, causing complete loss of network connectivity with no remote remediation path.

The agent now correctly restores DNS from a saved backup on restart and leaves interfaces untouched when no valid backup exists, restoring 2.x behavior.

– Fixed an issue where MSP Organizations configured to inherit Privacy Mode from their MSP dashboard were incorrectly restricted from accessing user-level data even when the MSP's Privacy Mode was set to Standard.

MSP Organizations now correctly resolve inherited Privacy Mode settings, ensuring that features and data visibility behave as expected based on the configured privacy level.

We’ve released to address an issue affecting executable signing in the previous release.

– Fixed an issue where some Windows Roaming Client executable components were not properly signed, causing antivirus and EDR tools to flag or block the agent during install or upgrade.

All executables are now correctly signed, preventing false positives and ensuring smoother installation and operation across security-controlled environments.

PII Privacy Mode is now available, giving organizations more control over how user information is displayed and exported. Admins can choose between three privacy levels:

Privacy settings can be configured by MSP and Organization administrators in .

⚠️ : PII setting updates cannot be saved in Firefox. Use an alternate browser, such as Chrome or Safari, to complete the change.

Resolved an issue where the Integrations tab could appear inconsistently when accessing the dashboard through whitelabeled domains. The tab now displays correctly across all supported dashboard URLs.

Plus general performance and stability improvements across the platform.

Windows Roaming Client is now available in the Production channel. This release brings together several improvements introduced during the 3.x Beta cycle, focusing on and , alongside major architectural and stability upgrades.

DNS PreCheck introduces a transparent DNS proxy that evaluates DNS requests locally on the device before they leave the network stack. This modern filtering approach improves reliability on restrictive or unmanaged networks while reducing conflicts with local DNS settings.

Administrators can configure behavior directly from the dashboard using the

Connection & Filtering Mode framework

, including:

This flexibility allows organizations to balance connectivity and enforcement based on their environment.

CyberSight provides

device-level activity insight

that complements DNS filtering data. It records time-stamped activity to help administrators understand what occurred around security events or DNS blocks.

CyberSight delivers a unified timeline that combines:

This additional context helps teams investigate alerts, detect unusual behavior earlier, and troubleshoot operational issues more effectively.

This release also introduces significant improvements to the Windows Roaming Client platform:

Throughout the Beta cycle, numerous improvements were made to strengthen reliability across diverse environments, including:

Together, these updates deliver a more resilient client designed to support modern Windows environments while providing deeper visibility and stronger DNS protection.

– Several improvements make it easier to manage and work with Relays in the dashboard.

These updates improve visibility, navigation, and reporting for Relay deployments across both organization and MSP environments.

The latest is now available in the and can be downloaded from in your dashboard.

✨

🧩

The Windows Roaming Client 3.x series now supports .

A dedicated is available in the Beta Channel alongside the standard x64 installer, enabling organizations to deploy the latest client architecture on modern ARM-powered hardware.

🛠

The client now validates the Windows operating system version at runtime to ensure advanced networking features run only on supported platforms.

If an unsupported OS version is detected:

See our knowledge base for Supported OS and End of Life details

🪲

– Updated underlying networking libraries improve reliability and maintain compatibility across supported Windows environments.

To deliver improved performance, security, and long-term reliability, DNSFilter is transitioning all customers to the .

Customers running Relays installed using the will need to perform a using the current Relay installer to continue receiving updates and support.

Follow the deployment instructions in our

Relay v1.4.0+ Deployment Guide

to install the latest version.

Upgrading ensures your environment continues to benefit from improved stability, security enhancements, and ongoing platform support.