The console tour, five things every frontline tech needs to find
Locate Organization, Network Sites, Roaming Clients, Filtering Policies, and the DNS Query Log in app.dnsfilter.com, and check the tenant switcher before clicking anything.
DNSFilter’s admin console lives at app.dnsfilter.com (or, for an MSP using whitelabel, at a custom subdomain like filtering.yourdomain.com). The Overview tab is the default landing, a 7-day, organisation-wide activity dashboard, treat it as a glance, not a real-time signal. The Query Log is what’s live. On the frontline, your day-to-day work touches five areas.
The five core concepts
flowchart LR
O[Organization]
O --> S[Network Sites]
O --> R[Roaming Clients]
O --> P[Filtering Policies]
O --> Q[DNS Query Log]
S -.applies.-> P
R -.applies.-> P
P --> AB[Allow / Block lists]
P --> C[Categories + Threats]
P --> BP[Block Page]
| Area | What it is | Why a frontline tech opens it |
|---|---|---|
| Organization | The tenant. For an MSP, each customer is their own Organization (sub-org). | Most frontline mistakes are tenant-switcher mistakes, make sure you’re in the right org. |
| Network Sites | A physical location or network identified by a static IP, IP subnet, or Dynamic DNS hostname. | Tells DNSFilter which IPs are allowed to query, and which Policy applies. |
| Roaming Clients | The Windows / macOS / mobile agent that protects a device off the office network. | Most “DNSFilter isn’t blocking on my laptop at home” tickets start here. |
| Filtering Policies | The rules, categories, threats, Allow/Block lists, Block Page assignment. | You’ll read a policy to explain why something was blocked; you won’t usually edit it from the frontline. |
| DNS Query Log | The forensic log of every query. Default view is the last 15 minutes. | Your first stop for any “site is blocked” ticket. |
The tenant-switcher discipline
For MSP staff, the most expensive mistake is editing the wrong customer’s policy because you didn’t switch organisation first. Establish the habit:
- Land on the dashboard.
- Confirm the organisation name in the header before anything else.
- If you’re escalating a ticket via screenshot, include that header so the next tech can see which tenant you were in.
A walkthrough: Sarah’s ticket from lesson 1
Switch to Able Moose Accounting
From the MSP organisation drop-down, select Able Moose Accounting. Verify the org name appears in the header before continuing.
Open DNS Query Log
Default view is the last 15 minutes, usually enough for a fresh “blocked just now” ticket. If it isn’t, widen the time range.
Filter by Site or Roaming Client
Add a filter for Sarah’s Network Site (office) or her Roaming Client (laptop). The filter chip appears at the top of the log.
Read the verdict for the supplier domain
The matching row shows the category, threat feed match, or list entry that produced the block. That’s what you’ll cite in the ticket update.