Verify your policies using DNS Security test domains. Safely simulate malware, C2, and
phishing hits to ensure your Anti-Spyware profiles and actions trigger
correctly.
| Where Can I Use
This? | What Do I Need? |
|---|
Prisma Access NGFW VM-Series CN-Series
|
|
To ensure your security policies are correctly intercepting and enforcing actions on
malicious traffic, Palo Alto Networks provides a set of dedicated DNS Security
test domains. These domains allow you to safely simulate hits for specific
threat categories—such as malware, command-and-control (C2), or phishing—without
exposing your network to actual malicious content.
By attempting to resolve these domains from a client behind the firewall, you can
verify that your Anti-Spyware profile is correctly attached to your security
policy and that the designated action (such as Alert, Block, or
Sinkhole) is being triggered.
