For details on cookie usage on our site, read our Privacy Policy
DNS sinkhole v9.0.1
- LIVEcommunity
- Discussions
- Cloud Delivered Security Services
- Threat & Vulnerability
- Re: DNS sinkhole v9.0.1
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
DNS sinkhole v9.0.1
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-11-2019 11:53 AM
Have 2 HA VMs with 9.0.1
Following this article: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/use-dns-queries-to-ident...
In section 3), how does this need to be configured ((addr.dst in 10.15.0.20) ) when using Palo Alto Networks Sinkhole IP (sinkhole.paloaltonetworks.com) ?
Thanks.
Ho
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-11-2019 01:07 PM
Hello,
Its whatever you configured in your anti-spyware policies.
Regards,
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-12-2019 01:05 AM
Hello,
The IP addresses currently are IPv4—sinkhole.paloaltonetworks.com and a loopback address IPv6 address—::1. These address are subject to change and can be updated with content updates.
As per my previous update, in PAN-OS v9.0.1:
- Mark as New
- Subscribe to RSS Feed
- Permalink
06-17-2019 01:24 PM
just use the configured IPV4 dns address
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-10-2020 09:32 AM
The only options available are the loopback or the PAN URL:
There is no IPV4 available for the PAN networks.
- DNS Sinkhole in Threat & Vulnerability Discussions
- DNS Security Service interfering with SPAM filter in Threat & Vulnerability Discussions
- Severity High and medium action are getting allow instead of block in Threat & Vulnerability Discussions
- Unable to resolve internal url's after implementing dns security. in Threat & Vulnerability Discussions
- Microsoft URL being DNS sinkholed suddenly? in Threat & Vulnerability Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
