DNS internet filtering solution provides you a configurable dns server. Dns query to a blocked domain will be redirected to a denial page. This solution has below advantages and disadvantages.

Advantages:

1. Easier to be deployed. You only need to change your dns server to get filtered.
2. Can filter domains via a black list or url category.
3. Can provide usage history and reports.

Disadvantages:

1. The filtering dns server may not be as fast as public domain servers.
2. Clients can break filtering by modifying dns servers.
3. All clients can only share a same blocking policy.
4. Can not block applications.
5. Can only record dns query quest. No bandwidth reports or visited url reports.

Comparison

Compared to this internet filtering solutions, WFilter ICF is more difficult to be deployed. However, WFilter is much more powerful:

1. When pass-by deployed, WFilter has no influence to your network performance.
2. Client can not bypass filtering because WFilter inspects all network packets.
3. You can set individual blocking policy for each client.
4. More filtering features, including web filtering, web downloading blacklist, url keywords filtering, application control, ip-mac binding…
5. More monitoring features and reports. WFilter can record visited domains, url, bandwidth… You can get various reports and statistics.

So if you only need to filter some domains or categories for the whole network, dns filtering would be a good choice. If you need more detailed reports or more dedicated blocking policy, WFilter ICF can be more helpful.