Prisma Access

Use the credentials associated with your Palo Alto Networks support account and log in to the Prisma Access application on the hub.

Add domain overrides in cases where false-positives occur.

Select

Manage

Configuration

Security Services

DNS Security

and select a DNS Security profile to modify.

Add Override

Delete

to modify the domain list entries as necessary. Each additional entry requires the domain and a description.

Click

to save your modified DNS Security profile.

Reference an external dynamic list (EDL) as part of your DNS Security profile to import third party threat feeds.

Create an domain-based external dynamic list (

Manage

Configuration

Security Services

External Dynamic Lists

Select

Manage

Configuration

Objects

DNS Security

In the

External Dynamic Lists

panel, select an EDL and select the

Policy Action

Packet Capture

settings, and in

Apply to Profiles

, select the DNS Security profile for which you want the EDL domain list to apply to.

Click

Save

when you have finished making your updates.

Document:DNS Security Administration