PAN-OS 10.0 and later

Log in to the NGFW.
Configure the DNS Security signature policy settings to bypass DNS Security queries.
Select

Objects

Security Profiles

Anti-Spyware

.

Select the profile containing your active DNS Security policy settings.

Select the

DNS Policies

tab.

For each DNS category, set the log severity to

none

, the policy action to

allow

, and packet capture to

disable

. In the following, the DNS Security categories have been configured to bypass DNS Security queries.


Select
DNS Exceptions
and remove all
DNS Domain/FQDN Allow List
entries.

Click
OK
to save the Anti-Spyware profile.