Feature Requests

DNSFilter should have a multi-tenant app registration to streamline Microsoft Entra SSO setup. This would eliminate the need for customers to create app registrations and client secrets. https://merill.net/2023/04/azure-ad-multi-tenant-app-vs-single-tenant-app/ A multi-tenant app registration would also make it easier to implement this. https://dnsfilter.canny.io/feature-requests/p/sso-rbac-support-different-default-administrator-roles-depending-on-azure-sso-ro

Would like a report that gives you agents that have not checked in in 15 days or so.

A threat category for domains commonly used for Living Off the Land techniques, such as VSCode tunnels or generating OAuth tokens (for instance insiders.vscode.dev and global.rel.tunnels.api.visualstudio.com ). The end user would have greater protection with minimal impact as the average user is unlikely to use them.

When is the Generative AI app blocking category going to get expanded beyond Deepseek? Here's a site that has a list of all: https://aitoolsdirectory.com/ . Our staff are finding all of kinds of AI tools to use with corporate consent some include Meta, Claude, Grammarly, ChatGPT and Gemini.

NextDNS allows use of DNS over HTTPS per profile. DNSFilter should allow DoH to point to specific policies and to allow devices to have DoH profiles (not just users with a roaming profile). This would be helpful for routers that support DoH but not DoT, and it would also be helpful to force certain clients on a VLAN with a separate policy to adhere to a policy for that client. It would also allow client-level statistics within a policy.

Request is to support the SAML 2.0 protocol for authentication with IdPs.

Sharing links from within the DNSFilter dashboard (with SSO configured) does not redirect other users to login via SSO. It instead redirects users to login with the non SSO method. The only workaround is for staff to click a specific SSO link to sign in, and then click on any other links to reach the specific page needed. This isn’t a good workflow. Since it’s being branded, there should be an SSO login on any login page with the custom logo.

Request is to add RDP app to AppAware

The notes feature is appreciated, but it could use some additional enhancements to improve overall function: 1) Allow editing of notes on existing list entries. 2) If a new entry raises the 'CNAME' workflow (where additional domains are recommended & added alongside the initial domain), apply any notes from the original entry to the CNAME entries as well. 3) Allow for notes entry from the 'inline' allow/block function on the Domain Query tool.

being able to search without exporting is extremely helpful to find blocked domains that are necessary for productivity in most cases. Being able to use more operators, especially the "does not contain" or "is not" - for blocked domains - is crucial.