PAN-OS 11.2.9 and later provides consolidated service domains for Advanced DNS Security and DNS Security subscription services and the ability to allow users to manually select their preferred regional FQDN settings. Both DNS Security and Advanced DNS Security traffic (requests and responses) are routed to the default (or user-defined) regional service domain. This creates a more unified and predictable experience for your DNS security services as it establishes a consistent DNS security inspection process by ensuring both request and response traffic follow the same regional routing path. The provides better alignment with chosen regional points of presence and gives customers greater control when using regional service domains for their security infrastructure.

The following table lists the service domains used by both Advanced DNS Security and DNS Security: