Activate Advanced DNS Security
Activate your DNS Security and Advanced DNS Security licenses.
| Where Can I Use
This? | What Do I Need? |
|---|
Prisma Access NGFW VM-Series CN-Series
|
A Palo Alto Networks
DNS Security subscription; this can include:
The Advanced DNS Security and DNS Security licenses also
require the installation of: |
You must activate your DNS Security or Advanced DNS Security subscription to
enable your organization to identify and block sophisticated DNS-layer threats, such as
DNS tunneling, DGA-based malware, and malicious domains. Activation for these integrated
subscriptions is performed by applying the authorization codes to your NGFW. These procedures assume you already have all the required license auth codes
necessary for activation.
If your subscription was purchased as part of a Prisma Access bundle, the Advanced DNS Security features are automatically included. In these cases, no separate
activation action is required for the Advanced DNS Security component after you activate
the primary bundle license, as is typical for Prisma Access
You must install the device certificate on your
NGFW
before you can activate your
Advanced DNS Security license.
Palo Alto Networks uses the
device certificate to authentication the
NGFW and
Prisma Access to
allow them to connect to the
Advanced DNS Security
cloud service.
Palo Alto Networks requires
the device certificate to use any
Palo Alto Networks cloud service.
Palo Alto Networks begins enforcement of device certificate authentication for Advanced DNS Security on February 11, 2026.
If you have NGFW with an active Advanced DNS Security license, you must
install the device certificate on your NGFW by March 13 2026 (30
days).
After this date, your NGFW will no longer be able to connect to the
Advanced DNS Security cloud service.
After you install the device certificate on your NGFW,
you can continue to activate the Advanced DNS Security license:
