PAN-OS 10.0 and later

Configure the DNS Security signature policy settings to bypass DNS Security queries.

Select

Objects

Security Profiles

Anti-Spyware

Select the profile containing your active DNS Security policy settings.

Select the

DNS Policies

tab.

For each DNS category, set the log severity to

none

, the policy action to

allow

, and packet capture to

disable

. In the following, the DNS Security categories have been configured to bypass DNS Security queries.

Select

DNS Exceptions

and remove all

DNS Domain/FQDN Allow List

entries.

Click

to save the Anti-Spyware profile.

Document:DNS Security Administration