Agent-Based Devices in CyberFOX DNS

The agent-based option for CyberFOX DNS filtering provides consistent and robust security across all devices, regardless of their network location. It ensures that DNS filtering policies are enforced even when devices are offline, automatically updates policies without requiring manual intervention, and provides detailed logging for troubleshooting. The agent can be easily deployed using enterprise tools like Intune, making it ideal for managing DNS filtering across an organization. Additionally, it supports fallback and offline modes, maintaining security and reliability even if the primary DNS service fails or the device is not connected to the internet.

Prerequisites:

• System Requirements: Ensure devices meet the necessary specifications for the agent.
   
• Permissions: Verify that you have administrative access to deploy the agent.
   
• Preparatory Steps: Gather the necessary information, such as the company ID, if you will deploy the agent using the command-line method.
   

Installation Process:

Download the Agent:

• Navigate to the CyberFOX portal and download the agent installer. Depending on your deployment method, you can download an agent at the company level or use a generic installer with a command line option to assign it to a company.
   

• Ensure the downloaded file name includes the company ID (e.g., DNS_client-<company_id>.exe).
   

Manually Install the Agent:

• Run the installer on the target device, ensuring not to change the file name
   
• Follow the installation prompts; the default settings should be accepted.
   
• The agent will register the device and start the services. There may be a brief delay of a few moments between when the agent starts and when the DNS service begins filtering. 

After Installation:

After the agent has been deployed, two services will be installed on the system: the CyberFOX DNS over HTTPS Service and the CyberFOX DNS over HTTPS Proxy Updater Service. These services are necessary for the DNS Filtering to work correctly. The machine's DNS entry will be updated to 127.0.0.1, which is where the service will listen for all DNS requests. 

Computers that have an agent installed will appear in the portal under 'Roaming Devices' in the Company section. You can manage computers that have been deployed with an agent by visiting the Company in the portal, where they will be listed on the Roaming Devices page. Each computer will have a unique ID that is partially composed of the computer's name.