Skip to main content


Downloading and Installing OTG 1 for Windows

Read Before Installing OTG 1 for Windows to understand some important prerequisites before following the steps below to download and install WebTitan OTG 1 for Windows.

  1. Click here to download the WebTitan OTG 1 for Windows install file (setup.msi). The current version of WebTitan OTG 1 for Windows is 1.6.19.

  2. Ensure you are logged in with Administrator privileges.

  3. Go to the command prompt. OTG 1 is installed from the command prompt for both a single install or multiple installs across your network using your preferred deployment method, e.g. group policy.

  4. Change directory so you are in the same directory as the setup.msi file downloaded in step 1.


    The installation requires you to provide your WebTitan Cloud log-in credentials as parameters. This allows for the automatic creation of your Roaming Locations in WebTitan Cloud. These parameters are used once and not stored.

  5. During installation, an administrator must create a command script based on the sample shown below with parameters edited for your WebTitan Cloud. When passed to OTG 1, these details create the roaming location key for this device.

    There are four required parameters described in the table below that must be edited. There are also several optional parameters described further down this page.


    The command must be on a single line with no line breaks.

    Required Parameters:





    The URL and port number of your WebTitan Cloud instance. You can get the FQDN by opening a command prompt in windows and typing nslookup followed by the IP of your WebTitan Cloud e.g. nslookup


    The IP address(es) of the WebTitan Cloud DNS resolver to send DNS requests to.


    The email address for the customer account under which the roaming location will be added.


    The password previously created for the customer account under which the roaming location will be added.


  6. Enter your custom script at the command prompt and press Enter

After Installing OTG 1 for Windows

There are a number of things to note after OTG 1 for Windows installation:

  • Assuming your current external IP address is not configured to be bypassed, OTG 1 will connect to your WebTitan Cloud account and start filtering.

  • After installation, OTG 1 connects to WebTitan Cloud and creates a new roaming location and a new user. The user will have a unique identifier made from the username@machine-name, e.g. docs@TRAINING-PC. If the PC is a member of a domain, then the user identifier will be the username appended with the domain name.

  • Users created via OTG 1 are assigned the default customer policy, but this can be changed to a new or different policy as required - see Policies for more information.

  • OTG 1 automatically downloads and installs the WebTitan Cloud SSL certificate to the Windows trusted certificates (also Firefox’s if installed). This allows the WebTitan Cloud block page for HTTPS sites to be shown without an error.

Optional OTG 1 Installation Parameters

When creating your command line script for installing OTG 1, as well as the four required parameters there are also several optional parameters that you can use:




When creating a roaming location, OTG 1 assigns the Windows or Mac computer name by default. To change this you can specify a LOCATION_NAME value.

LOCATION_NAME should not be used if installing multiple OTGs, as the roaming location names must be unique.

Example: LOCATION_NAME=Training-PC


If specified, a LOCATION_NAME_SUFFIX is appended to the LOCATION_NAME and separated using '@', e.g LOCATION_NAME@LOCATION_NAME_SUFFIX

LOCATION_NAME and LOCATION_NAME_SUFFIX should not be used together if installing multiple OTGs, as the roaming location names must be unique.



A remote user may visit a location (e.g. main office) that is also using WebTitan Cloud or any other internal filtering solution for filtering. In this case, you may want OTG 1 to be disabled while there. To do this, the office's public facing IP can be added to a list of bypass IPs when OTG 1 is installed. When the user leaves the office, OTG 1 will detect the IP change and start filtering again.

When OTG 1 is in bypass mode, the OTG tray icon will show "status: ignored".

To bypass multiple IPs (e.g. several locations) use a comma to separate them:

Example: BYPASS_IPS=,

To bypass a range of IPs use a hyphen to separate the two addresses:

Example: BYPASS_IPS= (no spaces between the hyphen and IPs).


Controls the WebTitan OTG 1 information, logo and popup notifications in the Windows system tray or macOS menu bar. Values can be:

  • 0 - hide the tray icon.

  • 1 - only show tool tip, but no notification balloon. (default)

  • 2 - show both tool tip and notification balloon.

Example: TRAY_TYPE=2


Used conditionally forward requests for particular domains to specific DNS servers, based on the current external IP address.

This is useful if you want to treat domains differently depending on where the user is, e.g. if a company's internal domain is the same name as its external domain and where access to the local office resources are impacted if routed externally. The format is:

DYNAMIC_FORWARD= [site]@[external IP]-[Resolvers, …];

Example:;,, meaning:

When external IP is, a query for * will be forwarded to


When external IP is, a query for * will be forwarded to or


Unconditionally forward any requests for the local domain to a local DNS server (rather than to WebTitan Cloud). If enabled, on startup OTG will attempt to get the name of the local domain and will store the DNS settings provided, for example by the DHCP server of that local domain.

When OTG 1 detects requests for the local domain (or subdomains), it doesn't send them to WebTitan Cloud, but to the stored IP of the local DNS server.

Can be set either true or false, e.g. FORWARD_DOMAIN=true


Allows OTG 1 to specify a port for communication with WebTitan Cloud other than the default 7771.


If this parameter is supplied, private cloud WebTitan Cloud servers must also be configured to listen on the port specified.

Example: RPC_PORT=7772