Applications Categories - Zero Trust App Management

Applications Categories - Zero Trust App Management

The ScoutDNS Application Policy sub-tab lets you block whole groups of web applications while still allowing specific apps through an allow list. It covers tens of thousands of domains and supports a zero-trust security approach.

For example, you can block every VPN service except your approved corporate VPN, or block all remote-desktop tools except the one your company standardizes on. This reduces the attack surface and frustrates malicious social-engineering attempts.

AI & ML

Generative AI and machine-learning tools that create or analyze text, images, or data.

Anthropic
ChatGPT/Open AI
Copilot
Gemini
Grok

Educational Games

Interactive learning apps designed primarily for children.

Khan Academy Kids
Toca Life World
Pok Pok

Email - Deprecated See "Web Email"

Legacy category consolidated into Web Email.

Games

Online games that can consume bandwidth and distract users.

Epic
Fortnight
Roblox
Steam

Instant Messaging

Real-time text and media chat services

Discord
Facebook Messenger
Skype
Slack
WhatsApp
WeChat

Itunes - Deprecated see Streaming Media


Online Storage

Cloud file-storage and synchronization platforms.

Google Drive
Dropbox
OneDrive
SharePoint
iCloud

Peer to Peer (Networking and VPN)

BitTorrent / μTorrent
qBittorrent
Transmission
NordVPN
Surfshark
Cloudflare WARP (1.1.1.1)
OpenVPN

Remote Access Tools

Software that allows remote control or screen sharing of devices including RMMs.

TeamViewer
AnyDesk
Chrome Remote Desktop

Social Networking

Platforms for sharing posts, media, and messages with broad audiences.

Facebook
Instagram
TikTok

Streaming Media

On-demand video and audio services (formerly included iTunes)

Netflix
Amazon Prime
Twitch
Spotify
Apple Music
YouTube Music

Voice over IP

Voice and video-calling applications that operate over IP networks.

Discord
Skype
WhatsApp
Zoom Phone

Web Chat

Browser-based team or customer-service chat platforms.

Intercom

Web Email

Email services accessed through the cloud via browser or desktop client

Gmail
Office365
Outlook.com
Yahoo Mail

Web Proxy

Sites and domains that attempt to bypass network controls or hide identity. 

Blocks all known DoH Domains
Disables Apple DNS Proxy Service
Hide.me

Windows Update

Windows OS updates, might be used to block large guest internet use in limited bandwidth sites.

    • Related Articles

    • Content Categories

      Below is a list of Content Categories and their descriptions. Adult Abortions These are sites that present arguments either in favor of or against abortion. This includes information on abortion procedures, sites that offer assistance in obtaining ...

    • Security Categories

      Adware Adware is software that automatically displays unwanted advertisements to generate revenue for its creators. These ads may appear as banners or pop-ups, often during software installation. Adware poses security risks as it can track personal ...

    • Organizations - Configuration and Management of Multi-Tenant Use

      ScoutDNS provides two levels of tenancy. The primary inherent level allows any operator to be a member of any number of accounts and have different roles depending on each account's settings. The second level, enabled through the Organizations tab, ...

    • Single Sign On (SSO) Configuration - Entra ID

      Entra ID SSO Enabling Single Sign On (SSO), allows admins to manage access for their instance through Entra ID SSO. ScoutDNS uses the Open ID Connect (OIDC) protocol for secure commination with Entra ID. SSO will disable all existing ScoutDNS ...

    • Install ScoutDNS Certificate for Browser HTTPS Errors

      When a site or domain is blocked by ScoutDNS, a block page is displayed to the end user instead of the requested domain. If the requested domain is encrypted with HTTPS, a security error will occur. To resolve this and display a valid block page for ...

    • Popular Articles

    • Working with Whitelist and Blacklist

      At times, it may be helpful to fully block or allow a domain based on your desired outcome. The White/Black List tab allows you to create and manage custom block and allow lists. You can associate these lists with all policies (global) or assign them ...

    • Quick Start Setup Guide - WAN Forwarding

      There are three methods you can use to protect your networks and users with ScoutDNS: 1) WAN Forwarding – This method involves configuring ScoutDNS with your WAN IP address and forwarding DNS queries from inside your network to our anycast resolver ...

    • Content Categories

      Below is a list of Content Categories and their descriptions. Adult Abortions These are sites that present arguments either in favor of or against abortion. This includes information on abortion procedures, sites that offer assistance in obtaining ...

    • Mixing DNS Providers

      It is generally not recommended to mix DNS providers. Most routers and systems randomly select which DNS server receives each packet, which can lead to issues with filtering and reporting due to mixed rules in the system cache. To avoid these ...

    • Dynamic IP Setup

      ScoutDNS supports dynamic DNS IP address integration with most dynamic DNS providers. Popular Dynamic DNS solutions include: No-IP ChangeIP DynDNS FreeDNS Once you have an account with one of these or a similar solution, you can configure ScoutDNS to ...

    • Recent Articles

    • Applications Categories - Zero Trust App Management

      The ScoutDNS Application Policy sub-tab lets you block whole groups of web applications while still allowing specific apps through an allow list. It covers tens of thousands of domains and supports a zero-trust security approach. For example, you can ...

    • Configure Entra ID based Policies

      ScoutDNS supports policy enforcement by user groups synced from Entra ID (formerly Azure AD). This is useful when admins want policy decisions to follow the user regardless of the device or device profile in use. This guide explains how ScoutDNS ...

    • Setup and Use Guide for MSPs

      ScoutDNS is built for Managed Service Providers (MSPs) to deliver robust DNS protection to their customers and end users. Setup is straightforward, thanks to our object-based configuration approach. Here is a brief outline of what this guide covers. ...

    • Configure AD (Active Directory) Policies

      ScoutDNS supports policy enforcement by user groups synced from Active Directory. This is useful when admins want policy decisions to follow the user regardless of the device or device profile in use. This guide explains how ScoutDNS syncs with ...

    • Configurable Objects and Their Associations

      ScoutDNS is designed with an object-based configuration model to simplify management and large-scale deployment. In this article, we will explore the various configurable objects and their associations. Allow/Block List Allow/Block List Description ...