>
    Strata Copilot
    Ports Used for DNS Proxy
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Firewall Administration
    4. Reference: Port Number Usage
    5. Ports Used for DNS Proxy
    Download PDF
    Next-Generation Firewall

    Ports Used for DNS Proxy

    Table of Contents

    Ports Used for DNS Proxy

    Network ports used by the DNS proxy feature, including encrypted DNS-over-TLS and DNS-over-HTTPS listening ports.
    The firewall and Panorama use the following ports for DNS proxy functions.
    Destination Port
    Protocol
    Description
    53
    TCP/UDP
    Port used to listen on interfaces associated with the DNS proxy feature.
    443
    TCP
    Port used to listen to DNS-over-HTTPS (Encrypted DNS Proxy feature).
    853
    TCP
    Port used to listen to DNS-over-TLS (Encrypted DNS Proxy feature).

    © 2026 Palo Alto Networks, Inc. All rights reserved.