As part of our ongoing commitment to strengthening our security infrastructure and optimizing performance, we are implementing an important update that involves changing our DNS Sinkhole Service IP address. This update is designed to enhance the effectiveness of our threat prevention mechanisms, ensuring more accurate detection and mitigation of malicious domains.
The DNS sinkhole setting uses the FQDN (sinkhole.paloaltonetworks.com) by default, allowing Palo Alto Networks to update its IP address automatically. In most cases, this change will be seamless and require no action from you.
However, if you manually configured the settings to use a static Palo Alto Networks Sinkhole IP instead of the FQDN, you must update your configurations accordingly.
If you are using the Palo Alto Networks Sinkhole IP address instead of the FQDN for your sinkhole settings, you will need to make the following adjustments:
1. Why is the IP address on the server changing?
Answer: The IP address change is part of our ongoing efforts to enhance security, increase network performance, and ensure our infrastructure can scale efficiently as our customer base grows.
2. When will the IP address change take place?
Answer: The change is scheduled for 3/24/2025.
3. What is the new IP address?
Answer: The new IP address will be 198.135.184.22. Please update your records and systems accordingly.
4. Will there be any downtime because of this change?
Answer: We anticipate minimal to no downtime during this transition. Our team has implemented measures to ensure a seamless switch to the new IP address.
5. What do I need to do to prepare for this change?
Answer: If you use Palo Alto Networks Sinkhole IP (72.5.65.111) in your DNS security profile, you will need to update these settings with the new IP address (198.135.184.22) to maintain connectivity. No action is needed if you are using the default settings of Palo Alto Sinkhole Networks FQDN (sinkhole.paloaltonetworks.com) or if you are using a local sinkhole server in your network.
6. How can I update my system with the new IP address?
Answer: You should replace the old IP address with the new one in all the DNS Security profile configurations where it is currently used.
7. What happens if I do not update my system with the new IP address?
Answer: The old IP address will be available until 9/31/25 (six months after the transition date). Failure to update to the new IP address within these six months could result in a loss of connectivity to our services, disruptions in your operations, and potential security vulnerabilities.
8. Is this change permanent?
Answer: Yes, this IP address change is permanent. To avoid any issues in the future, please ensure that all references to the old IP address are updated.
9. Is there a change required to the IPv6 Address?
Answer: No, this IP address change is for IPv4 only. No change is required for IPv6.
10. Who can I contact if I face any issues or have further questions?
Answer: Our customer support team can assist you with any issues or questions. You can reach them through https://www.paloaltonetworks.com/company/contact-support.
11. Where can I find more details about DNS Sinkholing?
Answer: You can refer to our How DNS Sinkholing Works article for more information
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
| Subject | Likes |
|---|---|
| 3 Likes Likes | |
| 3 Likes Likes | |
| 2 Likes Likes | |
| 2 Likes Likes | |
| 1 Like Likes |
| User | Likes Count |
|---|---|
| 4 Likes | |
| 3 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
