PAN-OS

Table of Contents

View DNS Security Logs (
NGFW (Managed by PAN-OS or Panorama)
)

Search for activity on the firewall for queries that have been processed using DNS Security.

Select

Monitor

Logs

Threat

and filter based on the DNS category.

Consider the following examples:

( category-of-threatid eq dns-c2 )

to view logs that have been determined to be a C2 domain by DNS Security.

( category-of-threatid eq adns-hijacking )

, whereby the variable

adns-hijacking

indicates DNS queries that have been categorized as a malicious DNS hijacking attempt by Advanced DNS Security.

To search for other DNS types, replace c2 with another supported DNS category (ddns, parked, malware, etc).

Select a log entry to view the details of a detected DNS threat.

The threat