
DNS security with Palo Alto Networks DNS Security
Detect DNS-based threats in real time with AI and machine learning, and stop DNS tunnelling and data exfiltration before data leaves your network.
An innovative approach to DNS security
DNS-based attacks are widespread today. Palo Alto Networks DNS Security uses artificial intelligence (AI) and machine learning (ML) to detect and prevent advanced threats that traditional methods miss, so malware, phishing attacks and exfiltration techniques such as DNS tunnelling are identified effectively.
Real-time detection of malicious activity
The AI-driven service monitors and analyses DNS queries and responses in real time. Machine learning learns normal and abnormal network behaviour, so malicious activity is spotted and blocked instantly.
Identifying malicious domains with advanced threat intelligence
Models trained on large datasets identify queries showing malicious activity, abnormal behaviour patterns and domains previously flagged as malicious. Threat intelligence is fed by a continuously updated data pool.
Protection against DNS tunnelling and data exfiltration
DNS tunnelling is the abuse of the DNS protocol by attackers to exfiltrate data or send command-and-control instructions. ML models automatically recognise query patterns that indicate tunnelling and block them quickly.
Dynamic updates from self-learning systems
The system continuously analyses threats, updates itself and adapts quickly to a changing threat landscape, so even zero-day attacks and not-yet-classified malware can be stopped.
Fewer false positives, automated response
Accurate anomaly detection keeps false positives to a minimum, so the security team focuses only on real threats. Detected threats are handled automatically: malicious DNS traffic is blocked or redirected to a sinkhole.
Here when you need the experience
Combining our experience with the power of Palo Alto Networks, we keep your security at the highest level at any scale and through any challenge. Contact us to add a DNS Security subscription to your existing firewall or to review your configuration.

More Palo Alto Networks security services
Frequently asked questions
Why does DNS security matter?
DNS translates domain names into IP addresses and is often allowed without inspection. That is why attackers frequently abuse DNS for malware command and control (C2), data exfiltration (DNS tunnelling) and phishing.
How does Palo Alto DNS Security work?
It analyses DNS queries passing through the firewall in real time with cloud-based AI/ML models, detects DGA-generated domains, DNS tunnelling and malicious domains, and blocks them or redirects them to a sinkhole.
Does DNS Security require a separate appliance?
No. DNS Security is added as a subscription to Palo Alto Networks Next-Generation Firewalls and Prisma Access; no extra hardware is needed.
Talk to our experts about your Palo Alto Networks project
A new deployment, a firewall migration or a support contract: tell us what you need and we will map out the right path with a free initial assessment.
