Automatically secure your DNS traffic by using Palo Alto Networks DNS Security service, a cloud-based analytics platform providing your firewall with access to DNS signatures generated using advanced predictive analysis and machine learning, with malicious domain data from a growing threat intelligence sharing community.

What's New

The DNS Security service

Maximize your protections against threats using DNS with the DNS Security subscription service.

 
;

DNS Security Signature Categories

The DNS Security service now features individually configurable and extensible DNS Security Signature Categories, which allows you to create discrete security policies based on the risk factors associated with certain types of DNS traffic.

Now available with PAN-OS 10.0!

 
;

Expanded DNS Domain Detection

DNS Security now protects you from additional DNS-based threats, including those that rely on dynamic DNS hosted domains, recently registered domains, and phishing domains.

Now available with PAN-OS 10.0!

 

DNS Security Analytics

Learn about the threats the DNS Security service can protect you from.

 

Cloud-Delivered DNS Signatures

Take advantage of the latest DNS threat detection methods using the modular and infinitely extensible DNS Security cloud-based service.

 

Featured Content

Book Image

OilRig Deploys “ALMA Communicator” – DNS Tunneling Trojan

Learn About DNS Sinkholing to Prevent DNS-based attacks


Palo Alto Networks firewalls use DNS sinkholing to forge a response to a DNS query for a malicious domain so that you can block and identify hosts on your network that have been infected with malware. DNS Security uses this mechanism to control C2 and other malicious traffic moving across your network.

Book Image

DNS Security Datasheet