https://clear-screen.ai/blog Endpoint DNS web content filtering — guides, compliance notes, and operational playbooks from ClearScreen. en Thu, 16 Jul 2026 00:00:00 GMT https://clear-screen.ai/blog/how-to-check-if-a-domain-is-malicious/ https://clear-screen.ai/blog/how-to-check-if-a-domain-is-malicious/ Thu, 16 Jul 2026 00:00:00 GMT A five-step triage for suspicious domains: threat feeds, category lists, registration age, certificate history, and DNS posture — plus a free checker that runs the first two steps for you. https://clear-screen.ai/blog/deploy-dns-filtering-with-intune/ https://clear-screen.ai/blog/deploy-dns-filtering-with-intune/ Wed, 15 Jul 2026 00:00:00 GMT Group assignment, platform scripts, run states, and the assignment-versus-installation gap — how to roll a DNS filtering agent out through Microsoft Intune and prove it actually landed. https://clear-screen.ai/blog/custom-blocklist-categories-beyond-the-standard-taxonomy/ https://clear-screen.ai/blog/custom-blocklist-categories-beyond-the-standard-taxonomy/ Tue, 14 Jul 2026 00:00:00 GMT Public category lists cover the common cases. They don't know your competitors, your terminated vendors, or your sector's niche time-sinks. How tenant-defined categories fill the gap without becoming ungoverned sprawl. https://clear-screen.ai/blog/nis2-web-filtering-and-dns-controls/ https://clear-screen.ai/blog/nis2-web-filtering-and-dns-controls/ Fri, 10 Jul 2026 00:00:00 GMT NIS2 asks for risk-management measures and fast incident reporting, not product checklists. Here is what web filtering and DNS controls must produce for an audit. https://clear-screen.ai/blog/stevenblack-and-ut1-blocklists-in-the-enterprise/ https://clear-screen.ai/blog/stevenblack-and-ut1-blocklists-in-the-enterprise/ Wed, 08 Jul 2026 00:00:00 GMT StevenBlack and UT1 are the two community lists behind most filtering stacks. Here is how to run them in the enterprise with provenance, cadence, and integrity. https://clear-screen.ai/blog/dns-filtering-for-msps-tenant-isolation-without-sprawl/ https://clear-screen.ai/blog/dns-filtering-for-msps-tenant-isolation-without-sprawl/ Mon, 06 Jul 2026 00:00:00 GMT Per-client tenants, per-tenant enrollment keys, and custom categories for contractual blocks — answering any client auditor from that client's tenant alone. https://clear-screen.ai/blog/web-filtering-on-windows-without-a-proxy/ https://clear-screen.ai/blog/web-filtering-on-windows-without-a-proxy/ Fri, 03 Jul 2026 00:00:00 GMT No TLS interception, no PAC files, no gateway dependency — what the local-resolver agent enforces on Windows, and an honest look at what a full SWG still does better. https://clear-screen.ai/blog/gdpr-compliant-employee-web-filtering/ https://clear-screen.ai/blog/gdpr-compliant-employee-web-filtering/ Tue, 30 Jun 2026 00:00:00 GMT Legitimate interest, proportionality, and data minimization — logging block events without building a browsing-history archive, and where works councils come in. https://clear-screen.ai/blog/ai-tool-blocking-without-blocking-productivity/ https://clear-screen.ai/blog/ai-tool-blocking-without-blocking-productivity/ Fri, 12 Jun 2026 00:00:00 GMT Blocking AI tools without blocking productivity https://clear-screen.ai/blog/dns-filtering-vs-proxy-for-endpoints/ https://clear-screen.ai/blog/dns-filtering-vs-proxy-for-endpoints/ Fri, 12 Jun 2026 00:00:00 GMT DNS filtering vs proxy for endpoints: what CISOs should compare https://clear-screen.ai/blog/dora-ict-risk-dns-layer/ https://clear-screen.ai/blog/dora-ict-risk-dns-layer/ Fri, 12 Jun 2026 00:00:00 GMT DORA ICT risk: why the DNS layer belongs in your register https://clear-screen.ai/blog/false-positive-review-workflow/ https://clear-screen.ai/blog/false-positive-review-workflow/ Fri, 12 Jun 2026 00:00:00 GMT False-positive review workflow: from block page to audit evidence https://clear-screen.ai/blog/ed25519-signed-threat-feeds-offline/ https://clear-screen.ai/blog/ed25519-signed-threat-feeds-offline/ Sat, 06 Jun 2026 00:00:00 GMT ed25519-signed threat feeds that work offline https://clear-screen.ai/blog/ut1-categories-what-to-block-first/ https://clear-screen.ai/blog/ut1-categories-what-to-block-first/ Sat, 06 Jun 2026 00:00:00 GMT UT1 categories: what to block first on a pilot fleet https://clear-screen.ai/blog/vendor-lock-in-director-proprietary-feeds-cannot-migrate-evidence/ https://clear-screen.ai/blog/vendor-lock-in-director-proprietary-feeds-cannot-migrate-evidence/ Tue, 03 Mar 2026 00:00:00 GMT The director who couldn't switch web-filtering vendors because his audit evidence was trapped inside the old one https://clear-screen.ai/blog/incident-reporting-deadline-ciso-cannot-reconstruct-endpoint-egress-timeline/ https://clear-screen.ai/blog/incident-reporting-deadline-ciso-cannot-reconstruct-endpoint-egress-timeline/ Fri, 13 Feb 2026 00:00:00 GMT The CISO facing a 24-hour NIS2 reporting clock with no way to reconstruct what the endpoint talked to https://clear-screen.ai/blog/block-page-trust-collapse-it-manager-cryptic-error-flood/ https://clear-screen.ai/blog/block-page-trust-collapse-it-manager-cryptic-error-flood/ Thu, 22 Jan 2026 00:00:00 GMT The IT manager whose block page looked like a malware warning, and trained users to ignore real ones https://clear-screen.ai/blog/byod-personal-device-compliance-lead-cannot-scope-filtering-legally/ https://clear-screen.ai/blog/byod-personal-device-compliance-lead-cannot-scope-filtering-legally/ Thu, 01 Jan 2026 00:00:00 GMT The compliance lead who tried to filter personal devices, and walked into a privacy problem https://clear-screen.ai/blog/phishing-incident-board-asks-why-not-blocked-ciso-no-threat-feed-integration/ https://clear-screen.ai/blog/phishing-incident-board-asks-why-not-blocked-ciso-no-threat-feed-integration/ Wed, 10 Dec 2025 00:00:00 GMT The CISO standing in front of the board after a phishing hit, explaining why a known-bad domain wasn't blocked https://clear-screen.ai/blog/category-overblock-productivity-revolt-it-director-rolled-back-everything/ https://clear-screen.ai/blog/category-overblock-productivity-revolt-it-director-rolled-back-everything/ Wed, 19 Nov 2025 00:00:00 GMT The director who blocked a too-broad category, triggered a productivity revolt, and disabled filtering entirely https://clear-screen.ai/blog/local-admin-edits-hosts-file-it-director-endpoint-filter-bypassed/ https://clear-screen.ai/blog/local-admin-edits-hosts-file-it-director-endpoint-filter-bypassed/ Tue, 28 Oct 2025 00:00:00 GMT The director who trusted the agent, while local admins edited the hosts file and the resolver out of the loop https://clear-screen.ai/blog/intune-deployment-drift-endpoint-manager-thought-100-percent-coverage/ https://clear-screen.ai/blog/intune-deployment-drift-endpoint-manager-thought-100-percent-coverage/ Tue, 07 Oct 2025 00:00:00 GMT The endpoint manager who reported 100% Intune coverage, while a tenth of the fleet never got the filter https://clear-screen.ai/blog/deal-loss-security-vendor-questionnaire-no-egress-control-evidence/ https://clear-screen.ai/blog/deal-loss-security-vendor-questionnaire-no-egress-control-evidence/ Mon, 15 Sep 2025 00:00:00 GMT The sales-side director who lost a deal because the security questionnaire asked for egress-control evidence he didn't have https://clear-screen.ai/blog/dora-ict-risk-register-banking-ciso-omitted-dns-layer/ https://clear-screen.ai/blog/dora-ict-risk-register-banking-ciso-omitted-dns-layer/ Wed, 27 Aug 2025 00:00:00 GMT The bank CISO who built a DORA ICT risk register and left the DNS layer out of it https://clear-screen.ai/blog/offboarding-gap-it-manager-departed-admin-kept-dns-override/ https://clear-screen.ai/blog/offboarding-gap-it-manager-departed-admin-kept-dns-override/ Tue, 05 Aug 2025 00:00:00 GMT The IT manager who offboarded the admin's email but not his standing exception to the web filter https://clear-screen.ai/blog/renewal-shock-it-director-per-seat-pricing-roaming-contractors/ https://clear-screen.ai/blog/renewal-shock-it-director-per-seat-pricing-roaming-contractors/ Thu, 17 Jul 2025 00:00:00 GMT The IT director who budgeted per seat, then got billed for every contractor laptop that ever roamed https://clear-screen.ai/blog/false-positive-storm-service-desk-manager-buried-override-requests/ https://clear-screen.ai/blog/false-positive-storm-service-desk-manager-buried-override-requests/ Wed, 25 Jun 2025 00:00:00 GMT The service-desk manager whose filter rollout generated 300 tickets a day and a queue of silent overrides https://clear-screen.ai/blog/agent-cannot-phone-home-soc-manager-blind-to-offline-endpoints/ https://clear-screen.ai/blog/agent-cannot-phone-home-soc-manager-blind-to-offline-endpoints/ Wed, 04 Jun 2025 00:00:00 GMT The SOC manager who thought silence meant safe, while offline laptops ran on stale policy for weeks https://clear-screen.ai/blog/unverifiable-blocklist-provenance-ciso-cannot-attest-feed-integrity/ https://clear-screen.ai/blog/unverifiable-blocklist-provenance-ciso-cannot-attest-feed-integrity/ Wed, 14 May 2025 00:00:00 GMT The CISO who couldn't tell the board where the blocklist came from, or whether it had been tampered with https://clear-screen.ai/blog/shadow-ai-llm-tools-security-manager-data-exfil-no-dns-visibility/ https://clear-screen.ai/blog/shadow-ai-llm-tools-security-manager-data-exfil-no-dns-visibility/ Tue, 22 Apr 2025 00:00:00 GMT The security manager who banned ChatGPT in a memo, while 400 endpoints talked to 30 AI domains https://clear-screen.ai/blog/msp-per-endpoint-policy-sprawl-owner-cannot-prove-tenant-isolation/ https://clear-screen.ai/blog/msp-per-endpoint-policy-sprawl-owner-cannot-prove-tenant-isolation/ Thu, 03 Apr 2025 00:00:00 GMT The MSP owner who sold 'managed filtering' and can't prove which policy applies to which client https://clear-screen.ai/blog/no-audit-trail-behind-block-decision-grc-lead-failed-evidence-request/ https://clear-screen.ai/blog/no-audit-trail-behind-block-decision-grc-lead-failed-evidence-request/ Mon, 17 Mar 2025 00:00:00 GMT When the auditor asks 'why was this blocked,' and the GRC lead has no answer to give https://clear-screen.ai/blog/shadow-dns-over-https-doh-bypass-it-director-policy-believed-enforced/ https://clear-screen.ai/blog/shadow-dns-over-https-doh-bypass-it-director-policy-believed-enforced/ Sun, 23 Feb 2025 00:00:00 GMT The IT director who believed his web filter was enforced, until a browser turned on DoH and routed around it https://clear-screen.ai/blog/smartscreen-deprecation-coverage-gap-ciso-assumed-covered/ https://clear-screen.ai/blog/smartscreen-deprecation-coverage-gap-ciso-assumed-covered/ Tue, 04 Feb 2025 00:00:00 GMT SmartScreen is being deprecated, and the CISO who assumed Defender covers it inherits the gap