Passive DNS Feature

[SurajN]

hi,

Please give me suggestion how to apply " Passive DNS Feature " in PAN-OS 10.0.X version because got link in that it is not suggested to apply this feature on PAN os 10.0.x. please find below link and do needful.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGHCA0D 

 

" 

[SCantwell_IM]

Passive DNS  monitoring was the name of a feature that was released in version 6.x.  It has been replaced by Telemetry (found under the Device tab.  The goal is to allow PANW to collect additional threat intelligence on unusual DNS activity that may be seen (known as fast flux domains).

As far as not wanting it enabled, it is an opt-in feature.  I am a PS engineer and for all of my customers, it is enabled.
I would recommend using this feature on the PANW FWs.

[dbrenipc]

Hello - Can you tell me where to find this in PanOS 10.1.6.  I do not have the checkbox option for "passive DNS monitoring" . 

Auditors are asking..

regards,

Don

[OtakarKlier]

Hello,

This is now called Telemetry. Here is an article on it, etc.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/share-threat-intelligenc...

Regards,