Your internet provider’s job is to deliver a working connection. That does not automatically include the family content rules, device controls, privacy choices or home-network design that suit your household.

This is not evidence that providers are hiding something. It is a reason to understand where the standard service ends and your own decisions begin.

1. Standard broadband is not a complete family-safety plan

Some internet providers offer parental controls, security products or filtered DNS; others provide only basic network settings. Features may differ by package, router and region.

Before relying on an ISP control, ask:

  • Does it apply to every device on the home Wi-Fi?
  • Which categories does it block?
  • Does it cover both IPv4 and IPv6?
  • What happens on mobile data or another network?
  • Can a family adjust the policy by child or device?
  • How are false blocks reported and corrected?

A provider feature may be a useful layer. The important thing is to test what it actually does rather than assuming “parental controls included” has the same meaning everywhere.

2. The supplied router may be managed by the provider

Remote management is not automatically a “backdoor.” Providers may use it legitimately for installation, diagnostics, firmware updates and support. The trade-off is that the household may have less control over certain settings.

Ask the provider:

  • Which settings can the customer change?
  • Does the router receive automatic security updates?
  • Is remote administration exposed to the public internet or limited to the provider’s management system?
  • Will a factory reset restore provider defaults?
  • Can DNS, guest-network and Wi-Fi security settings be configured?

Do not disable provider management blindly. On some services it may affect support, voice services or automatic configuration.

3. Your public IP address may change

Many residential connections use a dynamic public IP address. The address can change after reconnection, maintenance, a router restart or for reasons determined by the provider. Some networks also use carrier-grade NAT, where several customers share public address infrastructure.

For most browsing, this happens quietly. It matters when a service uses the household’s public IP to recognise the protected home connection. A changed address can require the home link to be refreshed or an appropriate automatic connection safeguard.

This is why a protection dashboard should report connection state and provide a guided recovery process. “Set once and forget forever” is not a responsible promise on every ISP connection.

4. DNS settings may not be the whole path

A router can be configured to use filtering DNS while a device or app attempts another resolver through encrypted DNS, a VPN or a private-relay feature. IPv6 can also create a parallel path if only IPv4 settings were changed.

A complete setup check should therefore confirm:

  • the intended DNS settings are active;
  • both IPv4 and IPv6 behaviour are understood;
  • known bypass services are restricted where the family plan requires it;
  • the child’s device has not retained a manual resolver; and
  • a safe diagnostic test reports the expected protection.

For more detail, see VPNs, Encrypted DNS and Private Relay: A Parent’s Guide.

5. Owning the router is not always the best answer

A third-party router may provide better controls, stronger Wi-Fi or more frequent updates. It may also be incompatible with an ISP’s fibre setup, voice service, VLAN configuration or support process.

Before buying hardware, identify the actual problem:

  • Does the current router lack security updates?
  • Can it not use the required DNS settings?
  • Is Wi-Fi coverage poor?
  • Are guest-network or family-control features missing?
  • Will the provider support bridge mode or a replacement device?

If the supplied router is supported, secure and configurable enough for the household, replacing it may add cost and complexity without solving a real problem.

Questions about privacy and service terms

A provider necessarily handles network information to operate, secure and bill for the service. What is collected, retained or shared should be assessed from the provider’s current privacy notice and the law that applies in your country—not from a generic claim that every ISP sells browsing history.

South African customers can ask for clarity under the provider’s privacy process and use ICASA’s consumer channels for unresolved service complaints. Keep copies of reference numbers and written responses.

A 20-minute ISP and router review

  1. Record the provider, package, router model and support number.
  2. Change the router administrator password if permitted.
  3. Confirm the Wi-Fi uses modern security.
  4. Check the firmware or provider-managed update status.
  5. Review the provider’s current privacy notice and parental-control description.
  6. Confirm which DNS settings can be changed.
  7. Ask whether the connection uses a dynamic public IP or carrier-grade NAT if this matters to your setup.
  8. Test family protection safely after a router restart or major ISP change.

A thought to hold

Your ISP provides the road into your home; it does not automatically decide the household rules for travelling on it. Those rules require deliberate choices about the router, devices, content boundaries and family habits.

Fitra Guard adds router-level family filtering to supported home connections. It does not replace the ISP, secure an outdated router by itself or control what happens on every other network. Its role is specific: helping the protected home internet reflect the boundaries the family has chosen.

Sources & further reading · 4 references

Last reviewed: 4 August 2026. ISP policies, router capabilities and network architecture differ by provider and package.