Palo Alto Networks Advanced DNS Security
Palo Alto Networks Advanced DNS Security: A focused DNS security layer for teams already operating Palo Alto Networks infrastructure. Ranked #17 of 51 in DNS Filtering Services by our editors (7.8/10); pricing: Pricing on request · 90-day trial; best for security teams focused on DNS threats.
At a glance
- Editor score7.8 / 10
- PricingPricing on request · 90-day trial
- Best forSecurity teams focused on DNS threats
- Free planNo
- Malware blockingYes
- Founded2005 · Santa Clara, California, United States
- Facts checked22 Sep 2026
Where it wins
- Detects hijacking, tunneling, command-and-control, phishing, and malware domains
- Supports allow, alert, block, and sinkhole policy actions
- Integrates with Palo Alto Networks security and resolver products
Where it doesn't
- Requires a Palo Alto Networks subscription
- Pricing is handled through contact sales
- Its strongest fit depends on Palo Alto Networks infrastructure
Our verdict on Palo Alto Networks Advanced DNS Security
Palo Alto Networks Advanced DNS Security is a cloud-based DNS security service for organizations using Palo Alto Networks infrastructure. It analyzes DNS traffic and responses in real time to identify malicious domains, DNS tunneling, command-and-control activity, phishing, malware, and DNS hijacking. Security teams can apply allow, alert, block, or sinkhole actions, review DNS activity, and monitor public-facing domains for misconfiguration. Web, Windows, macOS, and API access are supported, making it suitable for security operations spanning user devices, network controls, and programmatic workflows.
Its strongest differentiator is the depth of DNS-focused detection and response. Administrators can combine real-time threat analysis with detailed query records, activity insights, and a DNS Security dashboard in Strata Cloud Manager. The service also supports DNS over HTTPS and DNS over TLS through Advanced DNS Security Resolver. These capabilities give teams more than simple malware-domain blocking, particularly when investigating tunneling, hijacking, and command-and-control patterns or directing suspicious traffic to a sinkhole.
Platform fit is central to the buying decision. Integrations include Palo Alto Networks NGFW, Prisma Access, VM-Series, CN-Series, Strata Cloud Manager, Prisma Access Agent, and Amazon Route 53 Resolver DNS Firewall. The published offer includes a 90-day free trial, while pricing uses a contact-sales model. Advanced DNS Security requires a Palo Alto Networks subscription and, for some deployments, an Advanced Threat Prevention or Threat Prevention subscription. It is a strong choice for teams standardizing on Palo Alto Networks security products; organizations seeking an infrastructure-neutral DNS service should look elsewhere.
Your product? Our editors can test Palo Alto Networks Advanced DNS Security in depth and publish a review, labelled as paid · from $149/mo →
Palo Alto Networks Advanced DNS Security pricing
Palo Alto Networks Advanced DNS Security fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Malware blocking | Yes |
| Ad blocking | Not verified |
| Adult content filtering | Not verified |
| Per-device policies | Not verified |
| Activity logs | Yes |
| Analytics dashboard | Yes |
| Custom blocklists | Not verified |
| Free trial | 90 days |
| Deployment | Cloud |
| Platforms | Web, Windows, macOS |
| Support | Phone, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 7 integrations: Palo Alto Networks NGFW, Prisma Access, VM-Series, CN-Series, Strata Cloud Manager, Prisma Access Agent … |
| Pricing | Pricing on request · 90-day trial |
| Website | paloaltonetworks.com |
| Facts checked | 22 Sep 2026 |
Palo Alto Networks Advanced DNS Security integrations
Palo Alto Networks Advanced DNS Security lists 7 integrations on its own site.
- Palo Alto Networks NGFW
- Prisma Access
- VM-Series
- CN-Series
- Strata Cloud Manager
- Prisma Access Agent
- Amazon Route 53 Resolver DNS Firewall
Alternatives to Palo Alto Networks Advanced DNS Security
- AdGuard DNSBroad DNS protection with strong family controls, encrypted protocols, and wide device coverage.9.4
- NextDNSA flexible DNS filtering service with unusually broad controls on its free plan.9.3
- Control DA flexible DNS platform with detailed policies, schedules, analytics, and router deployment.9.2
See all Palo Alto Networks Advanced DNS Security alternatives →
Used Palo Alto Networks Advanced DNS Security? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Palo Alto Networks Advanced DNS Security for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Palo Alto Networks Advanced DNS Security is listed in our DNS Filtering Services directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/palo-alto-networks-advanced-dns-security/"><img src="https://www.itechguides.com/best/badge/palo-alto-networks-advanced-dns-security.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update