Before you can enable and configure Advanced DNS Resolver, you must obtain and install an Advanced DNS Resolver license in addition to any platform licenses from where it is operated. Licenses are activated from the Palo Alto Networks Customer Support Portal and must be active before Advanced DNS Resolver components can be accessed and configured. All DNS Security subscription services (similar to other Palo Alto Networks security services) are administered through security profiles, which in turn is dependent on the configuration of network enforcement policies as defined through security policy rules. Before enabling an Advanced DNS Resolver service, it is recommended that you familiarize yourself core components of the security platform in which the security subscriptions are enabled. Refer to your product documentation for more information.