New DNS Security Category: Parked

DNS Security Category: Parked

As part of the PAN-OS 10.0 release, Palo Alto Networks is adding a new DNS Security category for Parked.

ACTION: The Parked category will be set to “allow” as a default action. However, it is recommended to change the action to "sinkhole".

What is Parked?

Palo Alto Networks defines Parked as websites which host limited content or click-through ads which may generate revenue for the host entity but generally do not contain content that is useful to the end user.

When will the Parked Category be available in DNS Security?

The Parked category is available as part of the PAN-OS 10.0 release. The content update will be available the week of September 7 and the cloud service will begin publishing verdicts at the end of September. The default action will be set to 'Allow' under the anti-spyware profile. However, it is recommended to change the action to "sinkhole". On 9.0 and 9.1 releases, Parked category support will not be available. For categories supported in those releases, please refer to the following documentation on DNS Security.

DNS security will prevent access to known Parked Fully Qualified Domain Names. For comprehensive coverage, we recommend our URL filtering service that looks into a complete URL for categorization.