Before you can enable and configure DNS Security,
you must obtain and install a Threat Prevention (or Advanced Threat
Prevention) license as well as a DNS Security license in addition
to any platform licenses from where it is operated. Licenses are
activated from the
Palo Alto Networks Customer Support
Portal and must be active before DNS analysis can take place.
Additionally, DNS Security (similar to other Palo Alto Networks
security services) is administered through security profiles, which
in turn is dependent on the configuration of network enforcement
policies as defined through security policy rules. Before enabling
DNS Security, it is recommended that you familiarize yourself core
components of the security platform in which the security subscriptions
are enabled. Refer to your
product documentation for
more information.