Web Guard is part of the Internet Security tier and up.
Web Guard
Blocks ads, trackers, malware and adult sites in every browser. Turning it off restores your normal settings.
IP Reputation
Blocks your PC from connecting to known-bad servers — even ones a website filter can't see. No effect on normal browsing.
Block using TreeIQ cloud
Also block IPs that TreeIQ's live threat cloud flags as malicious (not just the built-in list). Major cloud/CDN providers are always protected. Turn off to only log cloud hits without blocking.
Stop the program too
When a program on this PC connects to a blocked malicious address, also end that program and quarantine it — but only when it is unsigned and running from a temporary/user folder. Signed and system programs are never touched.
Blocked connections (with the process behind them) now appear in Logs → Web Guard.
Always-allow IP
These IPs are never blocked, even if the cloud flags them. Use for a server you trust.
Add
Always-block IP
Your own IPs to always block, on top of the built-in list. A single IP or a range (e.g. 203.0.113.0/24).
Add
What to block
Loading…
Force SafeSearch
Makes Google, Bing, DuckDuckGo and YouTube hide explicit results
Family
Strict adult filtering
Blocks more adult sites. Catches more, but may occasionally block a normal site — add it to Always-allow if so.
Strict
Cloud lookup
Checks sites the local lists don't cover against TreeIQ's live threat database. Catches fresh malware, phishing and adult sites the moment they appear. Falls back safely if offline.
Live
Cloud strict mode
Also block sites the cloud marks as "suspicious" (e.g. brand-new domains). Stronger, but may occasionally block a safe new site.
Strict
Content categories (Business)
Category filtering
0 of 66 categories blocked
Category database will be installed with the Business build.
Malware and phishing are covered by the built-in threat lists. Uncategorized sites are allowed. Ads and trackers use the built-in ad/tracker lists.
Upstream DNS server for admins
Advanced. Leave blank for Automatic — TreeIQ uses your network's own DNS (on a company domain it detects the domain automatically and keeps internal names working). To force a specific DNS server (e.g. your domain controller or Pi-hole), type its IP or hostname. It's checked before it's applied — a wrong address is rejected, so browsing never breaks.
Automatic (detected): —
Save
Always-allow list
Sites here are never blocked, even if a category would block them.
Add
Always-block list
Add your own sites to block, on top of the categories above.