Fewer unblock tickets. The filter stays yours.
DNS Angel gives teachers one narrow, time-limited way to allow a site, inside rules you control. IronSights sets it up and watches it, so your team gets the controls without the upkeep.
You see everything that's live, and you can end it
Live access lists every allow in every room and class, with who started it and when it ends.
- Live access with End beside every allow.
- Stop all access ends all access and blocks new access until you lift it.
- Never allow is your school's own list, checked when a teacher saves a lesson set and again when they allow a site.
- Teacher limits set which sites teachers may allow, and for how long.
Deployed with the tools you already use
IronSights prepares everything for your school. Your team runs it once, the way you deploy anything else.
- Staff sign-in
- Microsoft Entra ID or Google Workspace, included as standard
- Classes from
- An Active Directory export (CSV)
- Computers
- Windows, with the DNS Agent installed
- Browsers
- Chrome, Edge and Firefox
- Install with
- Group Policy, Intune or your RMM tool
- Network
- School network and guest Wi-Fi at the DNS level, if you choose
- Group Policy preferenceSets the room for every computer in an organisational unit.xml
- Intune or RMM scriptSets the room on each computer it runs on.ps1
- Class groups scriptCreates class groups from your directory, if you use classes.ps1
Computers appear in DNS Angel in their rooms as the DNS Agent checks in.
Questions IT teams ask
Something else? Ask us directly.
How is the DNS Agent installed?
Silently, through Group Policy, Intune or your RMM tool. IronSights prepares the scripts for your school, including the one that places each computer in its room.
Does the DNS Agent decrypt web traffic?
No. It filters without decrypting traffic, and it updates itself.
What about encrypted DNS, proxies and VPNs?
Encrypted DNS in Chrome, Edge and Firefox still goes through the filter, and known proxy and VPN services can be blocked by category. The DNS Agent works alongside staff VPNs.
How do computers get into rooms?
Each room has its own placement setting. IronSights generates a Group Policy, Intune or RMM script for it, and moving a computer between rooms takes 1 to 2 minutes. DNS Angel shows where every computer is and where it should be.
What happens if someone removes the DNS Agent?
IronSights is alerted when the DNS Agent is removed from a computer, and works with your IT team to put it back.
Can teachers change the school's filter?
No. Teachers can only allow a site for a set time, inside Always blocked, your Never allow list and your Teacher limits. Access sits on top of the normal filter for a set time. It never changes the filter itself, and nothing on the Always blocked or Never allow lists can be allowed.
Bring your hardest questions to the demo.
We'll show you the school admin screens, the deployment scripts and how IronSights watches the filter, and answer the questions your network raises.