Do some of your devices spend time off your network? In this case, we highly recommend using a Virtual Private Network (VPN) to route all traffic from your off-network devices back to your DNSWatch-protected network. Not only does this allow DNSWatch to function optimally, but it also provides additional security when these devices are on untrusted networks.
If you cannot or choose not to VPN back to your headquarters network, you can configure DNSWatch's Always-On feature. DNSWatch’s Always-On setup page will help you get started using this feature configured on Macs, non-AD connected Windows systems, and mobile devices. For mobile devices, we recommend using an application such as DNS Override.
Please note that using a VPN with DNSWatch is the only way to deploy Always-On protection for networks managed by Active Directory and Windows Server.