Palo Alto PA-850 DNS Security Lizenz für HA-Geräte

DNS Security provides real-time protection and the industry's first security capabilities to defend against DNS attacks. Integration with the Palo Alto Networks Next-Generation Firewall (NGFW) provides you with automated security capabilities. This allows you to prevent attackers from bypassing security measures, eliminates the need for separate tools, and eliminates the need to make changes to DNS routing. DNS Security thus gives you the ability to defend against attacks on your organization using centralized control measures.

What makes DNS Security different?

DNS Security is a subscription-based cloud service that natively integrates with your NGFW to protect DNS traffic. With shared threat intelligence and machine learning (ML), hidden threats in traffic can be quickly identified. Cloud-based security capabilities are available out-of-the-box, can scale to any number of users, and are also always up to date. The purpose-built analytics dashboard provides comprehensive visibility into DNS traffic. With just one click, contextual information about attacks reported by DNS Security can be retrieved. DNS Security offers the following benefits:

• Uncompromising protection against DNS-based threats using advanced inline ML algorithms that predict and identify new and complex threats so attacks can be stopped
• Security measures that cannot be bypassed, for example, by changing DNS settings
• Uncomplicated deployment - simply activate and manage the subscription through the NGFW without having to redirect DNS traffic or go through lengthy change management processes
• Maximize efficiency by protecting DNS traffic through the Palo Alto Networks platform

Wichtige Funktionen der DNS Security

Neben Malware, Phishing und anderen typischen Bedrohungen nutzen Angreifer auch DNS aus, um eine zuverlässige C2-Kommunikation aufzubauen, Hosts im Unternehmensnetzwerk über das Internet anzugreifen, Distributed Denial-of-Service (DDoS)-Angriffe durchzuführen sowie die Kontrolle über fremde Domains zu übernehmen und damit letztendlich den Ruf des betroffenen Unternehmens zu schädigen. Moderne DNS-Sicherheitslösungen müssen diese Angriffe identifizieren und abwehren können.

Detecting and defending against complex DNS attacks and data exfiltration techniques, however, requires ML algorithms that analyze DNS traffic in near real-time to stay one step ahead of attackers. Reliable threat intelligence for these algorithms and measures to defend against specific attack techniques are also imperative. Finally, you need security points where detected malicious DNS activity is blocked or redirected.

DNS Security predicts and blocks malicious domains, immediately enforces appropriate rules in NGFW, and protects against automated attacks. Our ML-powered detection engines capture important new DNS-based attacks, such as extremely slow DNS tunneling, orphan DNS records (dangling DNS), and DNS rebinding. DNS Security can even detect new malicious domains as soon as they are registered, before they are used to attack your organization. DNS Security's comprehensive, industry-leading security features efficiently protect against threats regardless of DNS settings, configurations, and deployment models.