https://live.paloaltonetworks.com/t5/general-topics/enable-dns-cloud-security/m-p/529887#M109361 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/168790">@mohammedsalhis</a>&nbsp;</P> <P>DNS security requires additional licenses. If you have such license already applied on the firewall, you only need to update your Anti-Spyware profile and set action sinkhole for all categories that you want to block</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Astardzhiev_0-1675544236851.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/47658i4545B80BED87CB35/image-size/medium?v=v2&amp;px=400" role="button" title="Astardzhiev_0-1675544236851.png" alt="Astardzhiev_0-1675544236851.png" /></span></P> <P>&nbsp;</P> Sat, 04 Feb 2023 20:58:07 GMT aleksandar.astardzhiev 2023-02-04T20:58:07Z https://live.paloaltonetworks.com/t5/general-topics/enable-dns-cloud-security/m-p/529884#M109360 <P>Dear All,</P> <P>&nbsp;</P> <P>I generated&nbsp; BPA Report for Panos 10.2.3&nbsp; but I need to know how to enable it DNS Cloud Security ?</P> <P>&nbsp;</P> <DIV class="">Best Practice Checks&nbsp; <DIV class=""> <DIV class=""> <DIV class=""> <DIV class="">DNS Cloud Security<SPAN>&nbsp;(<SPAN class="">Fail)</SPAN></SPAN> <DIV class="">Configure DNS cloud security and set the action to Sinkhole and packet capture to a single packet. <DIV class="">DNS Sinkhole<SPAN>&nbsp;(<SPAN class="">Pass)</SPAN></SPAN> <DIV class="">Anti-Spyware Low/Informational Profile<SPAN>&nbsp;(<SPAN class="">Pass)</SPAN></SPAN> <DIV class="">Anti-Spyware Strict Profile<SPAN>&nbsp;(<SPAN class="">Pass)</SPAN></SPAN> <DIV class="">&nbsp; <DIV class="">Thanks</DIV> </DIV> </DIV> </DIV> </DIV> </DIV> </DIV> </DIV> </DIV> </DIV> </DIV> Sat, 04 Feb 2023 17:33:03 GMT https://live.paloaltonetworks.com/t5/general-topics/enable-dns-cloud-security/m-p/529884#M109360 mohammedsalhis 2023-02-04T17:33:03Z https://live.paloaltonetworks.com/t5/general-topics/enable-dns-cloud-security/m-p/529887#M109361 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/168790">@mohammedsalhis</a>&nbsp;</P> <P>DNS security requires additional licenses. If you have such license already applied on the firewall, you only need to update your Anti-Spyware profile and set action sinkhole for all categories that you want to block</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Astardzhiev_0-1675544236851.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/47658i4545B80BED87CB35/image-size/medium?v=v2&amp;px=400" role="button" title="Astardzhiev_0-1675544236851.png" alt="Astardzhiev_0-1675544236851.png" /></span></P> <P>&nbsp;</P> Sat, 04 Feb 2023 20:58:07 GMT https://live.paloaltonetworks.com/t5/general-topics/enable-dns-cloud-security/m-p/529887#M109361 aleksandar.astardzhiev 2023-02-04T20:58:07Z