r/zenarmor

I recently had an issue where blocking YouTube was not working on ZenArmor.
The issue turned out to be Chrome's Secure DNS setting. Disabling this setting on the browser allowed the ZenArmor profile to correctly block YouTube.

ZenArmor has a setting to block DNS over HTTPS and DNS over TLS. However enabling these settings did not prevent Chrome's use of Secure DNS, I still had to manually change the setting in the browser.

My question is, Am I missing something? Should ZenArmor block Chrome's Secure DNS when I enable the ZenArmor setting to block 'DNS over HTTPS' and 'DNS over TLS'?

Any insight into this feature would be appreciated!

We've been heads-down building the features our customers and partners have been asking for, and we're proud to ship four major new capabilities in Zenarmor SASE 2.5:
 
CrowdStrike Device Posture Integration: Dynamic ZTNA policies that adapt in real time to device health signals from CrowdStrike Falcon. No posture? No access. It's that simple.
 
Real-Time Threat Alerts: Instant visibility into active threats across your distributed network, right when it matters most.
 
Bulk Gateway Provisioning: Deploy and manage gateways at scale without the manual overhead. Security shouldn't slow down your operations.
 
Deployment at Scale: Whether you're protecting 50 users or 50,000, Zenarmor SASE 2.5 is built to grow with you.
 
This release doubles down on what makes Zenarmor different: security that enforces at the source, with no cloud backhaul, no PoP dependency, and no latency tax.
 
Read the full release breakdown: https://www.zenarmor.com/blog/zenarmor-sase-2.5-release