Palo Alto Networks DNS Security Subscription 3 Year Prepaid - PA-3220 - PAN-PA-3220-DNS-3YR
- Predictive analytics disrupts attacks that use DNS for C2 or data theft
- DNS Security protects you against tens of millions of malicious domains identified with realtime analysis and continuously growing global threat intelligence.
- DNS Analytics empowers security personnel with the context to optimize their security posture
- Manufacturer Part #:PAN-PA-3220-DNS-3YR
For Pricing, request a quote.
Apply predictive analytics to disrupt attacks that use DNS for command and control or data theft.
Organizations invest a lot of time, money, and effort in securing their networks. However, one area that often does not receive its due attention is the Domain Name System (DNS). DNS is commonly utilized in many attacks, from malware propagation to data exfiltration. According to Palo Alto Networks Unit 42 threat research, approximately 80% of malware uses DNS to establish a command-and-control (C2) channel.
Since its inception, DNS has largely been unencrypted, but new encrypted DNS protocols that aim to improve privacy are gaining support among leading browser and other software vendors. With this increase in support, enterprise networks will begin to see more encrypted DNS traffic. While this should accomplish the goal of increasing privacy, encrypted DNS traffic that is not properly inspected or prohibited poses a security risk. This leaves many organizations needing to figure out how to protect against threats in a new world of encrypted DNS.
What Is Encrypted DNS?
DNS converts domain names that humans can read (e.g., www. paloaltonetworks.com) into Internet Protocol (IP) addresses (e.g., 34.07.51.202). When a user types a domain name into a web browser, the browser sends a DNS request to a DNS server, asking for the IP address associated with that domain name. The DNS server then responds with the IP address for that browser to use.
DNS traffic is sent over the network in plaintext, unencrypted, which leaves it vulnerable to spying or being intercepted and redirected to undesired destinations. Encryption of DNS makes it harder for anyone to snoop into DNS queries or corrupt them in transit. Specifically, encrypted DNS protocols add a layer of client privacy and protection from man-in-themiddle tampering while performing the same function as the traditional plaintext DNS Protocol.
Two methods for encrypting DNS have been introduced over the past few years: DNS over HTTPS and DNS over TLS.
| Product Name | Palo Alto Networks DNS Security Subscription 3 Year Prepaid - PA-3220 |
|---|---|
| SKU | PAN-PA-3220-DNS-3YR |
| Manufacturer | Palo Alto Networks |
| Data Sheet | View Sheet |
| Active | No |
| Service Length | 3 Year License |
