What's the difference between Content Filter and the DNS/URL Threat Filter?

Zyxel_James

Question: What's the difference between Content Filter and the DNS/URL Threat Filter?

Answer:

Web Content Filter checks the website category based on the Server Name Indication (SNI) in the HTTPS Client Hello.
DNS Content Filter checks the server name category based on the DNS query.

If the client is still able to access the websites, please verify whether DNS over HTTPS (DoH) is enabled on the client OS and in the web browser.
If DoH is enabled, DNS traffic will be encrypted and cannot be detected by the DNS Content Filter. Please make sure the DoH function is turned off.