DNSWatch is currently in beta with Content Filter Policies for Firebox. Some features are only available in the DNSWatch beta. For DNSWatch beta documentation, log in to the WatchGuard Beta test community.
While reports and alerts for protected networks and Fireboxes that use DNSWatch are available, reports and alerts related to DNSWatchGO Client usage are not available.
DNSWatch stores summary information about the top 20 domains blocked and the number of domains blocked each hour from all your protected addresses. You can choose to see the blocked domains individually or grouped by category.
The available content filter reports are:
- Top 20 Domains Blocked — This chart shows the top 20 domains blocked in the selected week
- Top 20 Categories Blocked — This chart shows the top 20 categories of domains blocked in the selected week
- Blocked Requests per Hour — This chart shows the number of blocked DNS requests for each hour in the selected week
By default, the Top 20 Domains Requested report combines domains into categories. If a domain does not match a category, the report shows the domain ranked separately. You can choose whether to combine domains into groups in weekly reports.
To see DNSWatch content filter reports:
- Log in to DNSWatch.
- Select Report > Content Filtering Weekly Reports.
The Content Filter Reports page appears. By default, the reports show Top Categories Blocked by category for the current week.
- To see Top Domains Blocked for the week, clear the Group domains by category check box.
DNSWatch reports are available after several hours of DNS requests from your protected networks. For a new DNSWatch account without protected networks, the reports show example data.
DNSWatch content filter reports show only the top 20 domains or domain categories.
View Filtered Requests
The Filtered Requests report is a detailed view of the domains blocked by content filter policies.
You can filter the report on these items:
- Domain Name — Select a domain to view.
- Category — Select the content category you want to view.
- Network — Select which network activity you want to view.
- Time Period — Select from past week, past 24 hours, or past hour.
To filter the Filtered Requests report:
- Log in to DNSWatch.
Select Report > Content Filtering Requests.
The Filtered Requests from Content Filtering page appears. Details of all filtered requests in the past week appear in the table.
- To show the filter options click Filter.
- Make your selections then click Apply Filter.
The table populates with the requests that meet the selected criteria.
To view additional details about the filtered domains, click the Action button for these options:
This option opens a page with additional information about the requests, such as network, last seen date, first seen date, and the total number of requests.
This option opens the Domain Search page with information about the domain. From this page, you can add the domain to your whitelist. For more information about whitelists, see Manage DNSWatch Whitelist Domains.
Add to Whitelist
This option opens the Add Domain to Whitelist page with the domain information pre-filled. For more information about whitelists, see Manage DNSWatch Whitelist Domains.