What do you like best?
* Webroot DNS Protection is reasonably easy to implement as it's Centrally managed.
* It works seamlessly with Webroot SecureAnywhere Endpoint Protection.
* It provides Protection on both a Device and Network Level if configured correctly. The reason why I like this is that you can have a base DNS Network Protection Policy in place that protects your whole network, but then you can create additional custom and more restricted policies for Groups or individual PC's by using their DNSP agent. This works great in a business environment with different requirements for various Departments.
* I provides Simple Policy Based Group Assignment to devices, or can be applied individually.
* The DNS Policies provide default Suggested Categories for protection, but it also has a large number of additional categories that can be configured for greater and tighter security.
* It provides reporting on Blocked Domains and Categories.
* It has a Whitelisting feature that one can use to allow certain websites through, if the URL is part of a Category that is being blocked. For example, if you block Social Networking, but only want to allow Facebook, then this can be done easily.
* It makes use of Webroot's BrightCloud Threat Intelligence which uses Artificial Intelligence and Machine learning to grow it's database and improve accuracy and protection. BrightCloud also has a website (https://www.brightcloud.com/tools/url-ip-lookup.php) where one can submit the URL of a website for review in case you feel it has not being categorised correctly. From experience I've found them to be reasonably quick to respond, usually within 24hours after they have reviewed it and have made changes, if they agree with your change request.
What do you dislike?
* There's an unnecessary long delay before policies kicks into effect. I am however aware that Webroot is working on reducing this delay.
* Network Level Protection only works with a Static Public IP. For most business this is fine, but for a home business, this is not ideal if your ISP does not provide you with a Static IP. In this case you can simply just use the DNSP agent on each PC.
* No DNSP agent available for Mobile devices as yet, but they can be protected at a network level if you have a Static Public IP from your ISP.
Recommendations to others considering the product
If you haven't given this a try as yet, I'd highly recommend you do. It does have a trial version, so it's definitely worth trying. Don't be put off by any initial issues or bugs, push through, as it is definitely worth using.
What business problems are you solving with the product? What benefits have you realized?
* Protects the whole Network at a higher level, meaning it blocks unwanted and malicious activity before it even enters your network.
* It's a great tool tool in a business environment to help employees stay focus on what they should be doing, when it's configured to block things like Social Networking, Video and Audio streaming websites, peer-to-peer sites and off course, adult and other inappropriate websites.
* It provides one with a great sense of security that you know that there's an additional layer of protection apart from your existing Antivirus and Anti-Malware software.
* Being centrally managed, makes it easy to maintain and monitor.