Customer HubRelution Decon (content filter)
Starting with version 26.3, Relution enables the setup of a DNS-based content filter for Android Enterprise devices. This feature ensures a secure and focused internet experience by restricting access to selected websites. With AI-powered content categorization, Relution Decon also provides a comprehensive parental control filter with advanced configuration options.
What is Relution Decon?
Relution Decon is an AI-powered add-on for Android Enterprise that filters content in real-time, creating a safe digital environment. Using DNS-based content control, Decon blocks unwanted websites, allowing users to work and learn in a protected, distraction-free space.
Relution Decon uses a DNS proxy to forward all requests to the Decon server. Websites are classified and either allowed or blocked according to policy rules. All data transfers are SSL-encrypted, ensuring user activities remain secure.
Decon App
The Decon app (io.relution.decon) must be distributed to devices via Manage Apps → before the Decon policy can take effect.
Once installed, it acts as the device’s Always-On VPN and monitors DNS requests to ensure that only approved content is accessible.
App features:
- Activates a system-wide DNS proxy, which cannot be disabled by the user
- Displays the current status of Relution Decon
- Provides insight into blocked websites and applied filter categories
Preventing manual VPN changes
Because Relution Decon operates as an always-on VPN, users could otherwise disable or replace it by editing the device’s VPN settings. To prevent this, combine the following two configurations:
- Restrictions →: enable Disable VPN Configuration
- Always-On VPN →: select
io.relution.deconas the always-on VPN app
Decon Policy
In the device policy, click Add → Relution Decon.
This policy automatically configures the Decon app on associated and supported devices and acts as a proxy for all DNS requests.
Policy configuration is completed upon publishing.
Policy configuration hierarchy (highest to lowest priority)
- Allow Websites
- Block Websites
- Blocked Categories
Decon in Relution Teacher
Decon can be selected and managed in class profiles with Relution Server 5.32.0 and Relution Agent 5.19.0. Student devices must have a Decon policy assigned.
Category Classification
Relution Decon automatically assigns each website to a category. Administrators can define which categories are blocked:
| Category | Description | Examples |
|---|---|---|
| Not suitable for minors | Sites inappropriate for youth | Pornography, Violence, Weapons, Drugs, Gambling, Adult Entertainment, Adult Shopping, Dating, Google Safe Search |
| Advertising | Advertising websites | Ad providers |
| Communication | Communication services | Email, Messenger, (Video) Calling |
| Social Media | Social media content | Facebook, Instagram, TikTok, etc. |
| Entertainment | Entertainment websites like streaming or games | Movies, Games, Videos |
| Music | Music streaming services | Spotify, Tidal, etc. |
| News | News and magazines | News, Weather |
| Shopping | Online shops (excluding adult content) | Amazon, eBay, etc. |
| Work | Work-related websites | Office, File Sharing, Intranet |
| Education | Learning websites | Wikipedia, Google Scholar |
| Generative AI | AI-specific websites | ChatGPT, Perplexity.ai, etc. |
| Phishing | Potential phishing websites | Potential scams, Data theft |
| Other | Everything else | Remaining sites |
Allow and Block Lists
- Allow / Block Websites: Specific domains can be allowed or blocked independently of categories. Only the domain should be specified, not the path.
Advanced DNS Configuration
Device DNS Servers: Alternative DNS servers can be configured if the Relution Decon DNS is unavailable. Fallback: Cloudflare Families DNS (1.1.1.3).
Relution Decon Server DNS: An alternative DNS server can replace the standard Cloudflare Families DNS on the Decon server