Cisco Umbrella | Leader in Cloud Cybersecurity and SASE Solutions. Source: about 1 year ago

A combination of subscription ip blocklists like that sold by MaxMind combined with DNS and application filtering services like Umbrella would catch most services. For good measure I'd toss in local .exe application whitelisting running on each of the schools machines to only allow the applications the school wants using something like applocker which is included in windows so it probably fits into their budget. Source: over 1 year ago

We've been very happy with Cisco's Umbrella product. A few years back I "test drove" the free version, but thats a very poor substitute for the paid product. It's not cheap, but it has worked very well for us. Over 70% of our users are remote since the start of COVID, so we opted for the "roaming client" installation on every endpoint. We have a "basic" network profile for our office locations that slightly... Source: over 1 year ago

You could also use dnscrypt-proxy (or Simple DNSCrypt for a GUI) with custom blocklists to prevent known malicious sites from loading. Source: over 1 year ago

That or just install Simple-DNSCrypts or just enabling DNS-Over-HTTPS. Source: almost 2 years ago

You can try encrypting your DNS request through Simple DNSCrypt (https://simplednscrypt.org/) and see if that fixes the issue. Source: about 2 years ago

So I've opted for dnscrypt which encrypts the DNS traffic. Source: over 2 years ago

For Windows users can use SimpleDNSCrypt for easier setup. Source: over 2 years ago