Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsSome links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
KeepSolid DNS Firewall is a legitimate DNS-filtering app, not a full firewall, antivirus, or traditional VPN. It routes DNS requests through KeepSolid’s service and can block domains identified as malicious, phishing-related, or belonging to categories you choose. It is a sensible low-cost layer for straightforward website filtering, especially for existing KeepSolid customers, but it cannot remove malware already on a device, hide your IP address, or guarantee that every page on an allowed domain is safe.
What KeepSolid DNS Firewall actually does
When an app requests example.com, DNS translates that name into an IP address. DNS Firewall checks the hostname against KeepSolid’s threat and category rules before returning an address. A blocked request fails or receives a blocking response; an allowed request continues normally.
KeepSolid describes the app as using an encrypted connection to its DNS servers. The Apple listing also says it uses WireGuard; that is a vendor description, not independent validation. The operating system may display a VPN-permission prompt because the app uses a VPN-style profile to capture and protect DNS traffic. That does not make it a full traffic-routing VPN.
Free tools Windows power users keep installed
One-click scans. No signup required.
Included controls
- Blocking of domains identified by KeepSolid as malicious or associated with phishing.
- Category filters, such as adult content, gambling, games, or social sites.
- Custom blocklists for individual domains.
- Account-based activation and integration with KeepSolid products, including VPN Unlimited and the MonoDefense ecosystem.
Filtering normally applies to domains or hostnames, not the complete URL path. A safe and unsafe page can therefore share the same allowed domain.
#1 Best Overall
- 【Five Gigabit Ports】1 Gigabit WAN Port plus 2 Gigabit WAN/LAN Ports plus 2 Gigabit LAN Port. Up to 3 WAN ports optimize bandwidth usage through one device.
- 【One USB WAN Port】Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port. For complete list of compatible 4G/3G modems, please visit TP-Link website.
- 【Abundant Security Features】Advanced firewall policies, DoS defense, IP/MAC/URL filtering, speed test and more security functions protect your network and data.
- 【Highly Secure VPN】Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN, 16× L2TP, and 16× PPTP VPN connections.
- Security - SPI Firewall, VPN Pass through, FTP/H.323/PPTP/SIP/IPsec ALG, DoS Defence, Ping of Death and Local Management. Standards and Protocols IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q
What it cannot do
- Scan downloaded files or remove malware already installed.
- Control every inbound or outbound connection by process like a desktop firewall.
- Hide your public IP address or provide the location-changing function of a conventional VPN.
- Guarantee safety when malware uses a hard-coded IP, an encrypted proprietary resolver, or a compromised but permitted domain.
- Reliably remove every advertisement, sponsored result, first-party tracker, or in-page element.
Use it as a domain-resolution and content-control layer alongside endpoint security, not as a complete security suite.
Supported devices and availability
The U.S. Apple App Store lists versions for iPhone, iPad, Mac, and Apple Vision, with stated requirements of iOS/iPadOS 12.1 or later and macOS 10.15 or later. The listing identifies KeepSolid Inc. as the seller and offers the app free to download with in-app purchases: Apple App Store listing.
An Android listing is available under package com.keepsolid.dnsfirewall: Google Play listing. The retrieved listing confirms the core filtering functions, but current Android minimum-version details should be checked on Google Play. KeepSolid’s download area is keepsolid.com/dnsfirewall/downloads. Do not assume identical permissions, VPN-profile behavior, or features on Windows, macOS, Android, and Apple platforms.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteHow to install and configure DNS Firewall
Standalone app
- Download DNS Firewall from KeepSolid’s download page or your platform’s app store.
- Open the app and select Start Now.
- Approve the requested network or VPN-configuration permission. This creates the system profile used to enforce DNS filtering.
- Sign in or create a KeepSolid account if prompted, then let the app establish its encrypted connection to KeepSolid DNS servers.
- Select the website categories to block.
- Add specific hostnames to the custom blocklist when you need an extra rule.
A protection or connection indicator should appear. Test with a harmless domain in a category you intentionally blocked, rather than visiting a live malware URL.
Rank #2
- 【Flexible Port Configuration】1 Gigabit SFP WAN Port + 1 Gigabit WAN Port + 2 Gigabit WAN/LAN Ports plus1 Gigabit LAN Port. Up to four WAN ports optimize bandwidth usage through one device.
- 【Increased Network Capacity】Maximum number of associated client devices – 150,000. Maximum number of clients – Up to 700.
- 【Integrated into Omada SDN】Omada’s Software Defined Networking (SDN) platform integrates network devices including gateways, access points & switches with multiple control options offered – Omada Hardware controller, Omada Software Controller or Omada cloud-based controller(Contact TP-Link for Cloud-Based Controller Plan Details). Standalone mode also applies.
- 【Cloud Access】Remote Cloud access and Omada app brings centralized cloud management of the whole network from different sites—all controlled from a single interface anywhere, anytime.
- 【SDN Compatibility】For SDN usage, make sure your devices/controllers are either equipped with or can be upgraded to SDN version. SDN controllers work only with SDN Gateways, Access Points & Switches. Non-SDN controllers work only with non-SDN APs. For devices that are compatible with SDN firmware, please visit TP-Link website.
Activation through KeepSolid User Office
- Open KeepSolid User Office and sign in.
- Under subscriptions, locate KeepSolid DNS Firewall and choose Activate.
- Choose categories and create a custom blocklist if required.
- Launch DNS Firewall on each device and establish the secure connection.
KeepSolid says activated settings can also be applied through VPN Unlimited. Existing customers should check User Office before purchasing a second subscription.
Pricing: website and App Store prices differ
Prices are platform- and promotion-dependent. At the time checked, KeepSolid’s checkout page displayed the following standalone offers:
| Channel and term | Observed price | Qualification |
|---|---|---|
| KeepSolid website, monthly | $0.99 per month | Website price observed at the time checked; renewal and taxes may differ. |
| KeepSolid website, annual | $9.99 per year | Website price observed at the time checked. |
| KeepSolid website, three years | $26.99 one-time | Long-term or promotional payment displayed at the time checked; confirm terms. |
| U.S. Apple App Store, monthly entry | $1.99 | In-app purchase listing; platform billing applies. |
| U.S. Apple App Store, annual entry | $9.99 | In-app purchase listing; platform billing applies. |
Check the final checkout total and renewal wording at KeepSolid’s order page or in your app store. The U.S. listing reports a seven-day free trial, but trial eligibility can vary by plan, platform, and promotion. Apple or Google subscriptions are managed by those stores; website purchases are managed through KeepSolid. A “lifetime” or multi-year offer should not be interpreted as a promise of perpetual compatibility or support.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Privacy: what is stated and what is not
KeepSolid’s privacy policy lists DNS Firewall custom parameters, including domains and blocklist or allowlist categories. It also describes account and device information such as email, device identifiers, operating-system details, app usage, app version, activation date, and updates. DNS filtering necessarily requires the resolver to process DNS queries while protection is active.
Rank #3
- Easier-Than-Ever Setup — Convenient and easy router management via web browser or the ASUS ExpertWiFi mobile app through Bluetooth setup.
- VLAN for Added Security —Each of the Ethernet ports can be assigned to one or more VLAN IDs that provides additional security for your business.
- Up to 3 WAN Ethernet Ports – 1 gigabit WAN port and 2 gigabit WAN/LAN ports with load balancing optimize multi-line broadband usage.
- Backup WAN for Stable Connectivity –The USB port can be used as a backup WAN by connecting it to a mobile phone with hotspot to maintain a reliable internet connection.
- Commercial-Grade Network Security and VPN — Secure public WiFi connections with Safe Browsing and VPN features. Enjoy a free-subscription ASUS AiProtection Pro, including robust intrusion prevention system (IPS) features like deep packet inspection (DPI) and virtual patching to block malicious traffic.
KeepSolid says it does not monitor, store, or log internet activity in its VPN products and says it does not retain a user’s IP address after a session. Those are company policy claims. The reviewed materials do not establish an independent no-logs audit specifically for DNS Firewall. The Apple privacy label also reports possible collection of contact details, identifiers, location, usage data, diagnostics, purchases, and user content, depending on feature and platform. Store labels are developer disclosures, not security audits.
The available policy does not establish how long raw DNS queries or diagnostics are retained, whether queries are used for analytics, how cloud-synced lists are handled, or what happens after cancellation. Treat those as unanswered questions rather than assuming zero data collection.
DNS Firewall versus a VPN or antivirus
| Capability | DNS Firewall | Full VPN | Antivirus |
|---|---|---|---|
| Blocks listed malicious domains | Yes | Sometimes | Sometimes |
| Hides your IP address | No, by itself | Generally | No |
| Scans downloaded files | No | Usually no | Yes |
| Category-based website blocking | Yes | Usually not central | Sometimes |
| Protects against installed malware | No | No | Yes |
| Network-wide coverage | Usually device/account-dependent | Router-dependent | Usually per-device |
Encrypted DNS can stop a local network from reading ordinary DNS queries, but the resolver still processes them. It does not make browsing anonymous or route all application traffic through KeepSolid.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Common problems and recovery
Browsing stops after enabling protection
- Disable DNS Firewall briefly and retry the site.
- Check the custom blocklist and remove the domain if it was added accidentally.
- Disable one category at a time to find an overbroad rule.
- Restart the app and reconnect its network profile.
- Test Wi-Fi and cellular separately.
Another VPN or blocker is active
Mobile operating systems commonly allow only one app to control the system VPN or local-VPN slot. VPN Unlimited, another VPN, an ad blocker, a second DNS filter, or a corporate-management profile can conflict. Disconnect the competing profile before testing DNS Firewall.
Rank #4
- WITH 1-YEAR ELITE PACK INCLUDED – New devices registered on or after January 19, 2026 receive complimentary comprehensive web filtering, advanced Nebula Pro features, and enhanced ransomware protection for 12 months. Previously registered devices are not eligible
- ENTERPRISE-GRADE SECURITY WITH DUAL-WAN INTELLIGENCE – Real-time threat intelligence with IPS and anti-malware delivers wire-speed protection, while smart traffic distribution ensures optimal bandwidth usage and uninterrupted connectivity for critical business applications
- AX6000 WIFI 6 READY WITH 2X 2.5G MULTI-GIG PORTS – Dual-band support with seamless Zyxel mesh capability provides far-reaching wireless coverage, while multi-gig Ethernet enables high-speed WAN/LAN connectivity without re-cabling
- CLOUD MANAGEMENT MADE SIMPLE – Set up in minutes via Nebula mobile app and manage your entire network from a single centralized cloud platform without additional hardware controllers or software
- SUSTAINABLE DESIGN – Constructed with up to 95% post-consumer recycled plastics, reduced packaging, and eco-friendly inks to minimize carbon footprint and environmental impact
A legitimate service is broken
Category rules and custom lists can block shared content-delivery networks, login services, payment pages, CAPTCHA systems, embedded video, app APIs, or software updates. Add a narrowly scoped allowlist entry and change one rule at a time.
Filtering is easy to bypass
DNS-level parental controls do not stop a child from switching to cellular data, installing another VPN, changing DNS, using a browser’s own secure DNS, connecting directly to an IP address, or using another device. They are not a substitute for device-management controls and supervision.
Alternatives by use case
| Option | Best suited to | Trade-off |
|---|---|---|
| AdGuard DNS | Ad, tracker, threat, and family DNS filtering | Compare current account controls, limits, and retention terms. |
| NextDNS | Granular rules, analytics, and technical customization | More setup complexity; quotas and cloud analytics may matter. |
| Cloudflare 1.1.1.1 | A simple encrypted-DNS baseline | Basic resolver use is not automatically category filtering. |
| RethinkDNS | Android users wanting DNS plus local firewall-style controls | Narrower platform coverage and a more technical model. |
| SafeDNS | Family, school, or organizational policies | May be more administration than a single user needs. |
| Pi-hole | Self-hosted, network-wide home filtering | Requires hardware, router access, maintenance, and does not follow devices away from home. |
KeepSolid SmartDNS is a different product aimed primarily at access to geo-restricted streaming content, not malicious-domain or category filtering: KeepSolid SmartDNS.
Recommended Free Tools
Who should choose it?
- Good fit: someone wanting inexpensive, guided domain and category filtering; an existing KeepSolid customer; or a user who needs a simple custom blocklist without configuring a router.
- Poor fit: anyone needing malware removal, per-process firewall rules, detailed family activity reports, network-wide roaming protection, a location-changing VPN, or independently audited privacy assurances.
Before paying, check whether DNS Firewall is already available through your KeepSolid account or MonoDefense subscription at KeepSolid’s product page, then confirm the platform-specific price and renewal terms.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
