Web Protection
What to block, SafeSearch, allow & block lists
Web Protection is part of the Internet Security tier and up.
Web Protection
Blocks ads, trackers, malware & adult sites at the DNS level. While on, TreeIQ manages your DNS; turning it off restores your original DNS.
IP Reputation
Blocks your PC from connecting to known-bad IP addresses (malware & command-and-control servers) — including an IP typed straight into the address bar or hidden inside malware, which Web Protection can't see. No effect on normal browsing.
Block using TreeIQ cloud
Also block IPs that TreeIQ's live threat cloud flags as malicious (not just the built-in list). Major cloud/CDN providers are always protected. Turn off to only log cloud hits without blocking.
Blocked connections (with the process behind them) now appear in Logs → Web Protection.
Always-allow IP
These IPs are never blocked, even if the cloud flags them. Use for a server you trust.
Add
Always-block IP
Your own IPs to always block, on top of the built-in list. A single IP or a range (e.g. 203.0.113.0/24).
Add
What to block
Loading…
Force SafeSearch
Makes Google, Bing, DuckDuckGo and YouTube hide explicit results
Family
Strict adult filtering
Also blocks the adult .xxx/.porn/.sex domains and sites with explicit words in their name. Catches more, but may occasionally block a normal site — add it to Always-allow if so.
Strict
Cloud lookup
Checks sites the local lists don't cover against TreeIQ's live threat database. Catches fresh malware, phishing and adult sites the moment they appear. Falls back safely if offline.
Live
Cloud strict mode
Also block sites the cloud marks as "suspicious" (e.g. brand-new domains). Stronger, but may occasionally block a safe new site.
Strict
Upstream DNS server for admins
Advanced. Leave blank for Automatic — TreeIQ uses your network's own DNS (on a company domain it detects the domain automatically and keeps internal names working). To force a specific DNS server (e.g. your domain controller or Pi-hole), type its IP or hostname. It's checked before it's applied — a wrong address is rejected, so browsing never breaks.
Automatic (detected): —
Save
Always-allow list
Sites here are never blocked, even if a category would block them.
Add
Always-block list
Add your own sites to block, on top of the categories above.
Add