Bypass DNS Security Subscriptions Services (PAN-OS 10.0 and later)

1. Log in to the NGFW.
2. Configure the DNS Security signature policy settings to bypass DNS Security queries.

   1. Select ObjectsSecurity ProfilesAnti-Spyware.
   2. Select the profile containing your active DNS Security policy settings.
   3. Select the DNS Policies tab.
   4. For each DNS category, set the log severity to none, the policy action to allow, and packet capture to disable. In the following, the DNS Security categories have been configured to bypass DNS Security queries.

3. Select DNS Exceptions and remove all DNS Domain/FQDN Allow List entries.

4. Click OK to save the Anti-Spyware profile.