On Thursday, August 7th, Fuel had our monthly Spark User Summit and we spoke with two experts on the new product, the ADNS Resolver service, from Palo Alto Networks. Our speakers, Arun Kumar and Gokul Pokuri, introduced us to this new functionality for protecting DNS. DNS, a platform that has been attacked by threat actors for quite a while now, finally gets some help. The ADNS Resolver service will allow customers to get an additional layer of protection for DNS calls to help prevent man in the middle attacks, DNS hijacking, and several other methods that are vulnerable through DNS.
Question: What's the difference between the ADNS Resolver and URL Filtering within a NGFW?
Answer: The biggest difference is that the ADNS Resolver is a separate product/service and is not bundled within a next generation firewall. Additionally, the ADNS Resolver just works at the DNS level whereas the URL Filtering will be able to address the entire URL and look deeper into the content.
Question: Does the ADNS Resolver support DNSSEC?
Answer: Yes, it does.
Question: Does ADNS Resolver support the use of dynamic IP address?
Answer: Not at this time. The source IP address of your branch needs to be configured in Strata Cloud Manager to allow for connections into the ADNS Resolver's IP addresses. If you don't do this, the ADNS Resolver's systems will deny your connection.
Becoming a member of the Fuel User Group is a great way for individuals and organizations using Palo Alto Networks products and services to get access to a wealth of resources — knowledge, training, virtual test labs, networking opportunities, and tools which can significantly improve proficiency and effectiveness in cybersecurity and IT operations. As a reminder, membership is free!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
| Subject | Likes |
|---|---|
| 1 Like | |
| 1 Like | |
| 1 Like | |
| 1 Like | |
| 1 Like |
