How to Take Back Control of Your DNS Traffic

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Cyber Elite
Cyber Elite

Learn all about the DNS Security Service in the new Best Practice Webinar by Palo Alto Networks. This new webinar highlights DNS Security Service and how to strengthen your security posture. Get your questions answered on Live Community.

best-practices-dns_tw-800x418.png

 

PAN-OS 9.0 introduced several new exciting features and services, with the DNS Security Service being one of the biggest leaps forward, tapping into a new area of protection.

 

In their upcoming webinar on March 19th,  Take Back Control of Your DNS Traffic  Bryan Lee, Martin Walter, and Stan Lee will show you:


• How real-world threats found by Unit 42 use DNS for command-and-control and data theft.
• Challenges in addressing DNS-based attacks faced by the Palo Alto Networks SOC team.
• Best practices for protecting DNS traffic to keep your organization safe.

 

You’ll also get your questions answered in our live Q&A when you join us for this interactive session. Learn what you should be doing to protect your DNS traffic today—and how to stay ahead of emerging tactics.

 

 

In a nutshell, what does the DNS Security Service bring to the table?

 

By combining the data learned through services, alliances, and good old elbow-grease research, and applying predictive analytics to this vast wealth of information we can disrupt attacks that use DNS for exfiltration or C2.

dns security.png

 

Once you  Activate the Subscription License, all you need to do to Enable DNS Security is add the Palo Alto Networks DNS Security (represented in the drop-down as 'default-paloalto-cloud') to your existing Anti-Spyware Profile DNS Signature settings and select an action. 

 

I recommend setting the action to 'sinkhole' as this will add visibility in the traffic logs about the source of the malicious DNS requests.

 

DNS sinkhole - DNS security.png

 

Once all profiles are updated, commit the change and restart the DNS proxy process.

> debug software restart process dnsproxy

For more information and any questions you might have for the experts, register for the live webinar Take Back Control of Your DNS Traffic

 

Stay frosty

 

 

  • 4928 Views
  • 0 comments
  • 4 Likes
Register or Sign-in
About the Author
I drink and I know things
Labels