Advanced DNS Security is a cloud-delivered DNS filtering and threat prevention service that requires integration with Palo Alto firewalls. It is sold on a quote basis for enterprise organisations.
Listing updated . Checked by MSP Software .
Advanced DNS Security is a cloud-delivered DNS filtering service from Palo Alto Networks designed for organizations that have deployed Palo Alto firewalls. It provides real-time detection of malicious domains using AI-powered machine learning models and blocks over 157 million malicious domains daily from crowd-sourced threat intelligence collected across over 65,000 customers worldwide. The service uses detection algorithms that are 6 times faster than competing DNS security vendors according to vendor benchmarks. It integrates natively with Palo Alto NGFW and Prisma Access, as well as supporting proxy-compatible deployments for organizations using DNS proxies or hybrid network architectures.
The product includes automated DNS hijacking prevention with continuous monitoring of public-facing domains to detect misconfiguration and takeover attempts. It delivers centralized management through a single console without requiring DNS traffic rerouting or infrastructure changes, making deployment faster for organizations already running Palo Alto firewalls. Advanced DNS Security offers a 90-day free trial to evaluate the service in production before committing to a subscription.
Pricing is not published on the vendor website and must be obtained through direct quotes from Palo Alto Networks sales representatives. Typical deployment is enterprise-focused, targeted at organizations with 50 or more employees seeking to add DNS-layer threat detection to their existing Palo Alto firewall deployments. The product requires an existing Palo Alto firewall and is not available as a standalone DNS filtering solution for organizations without Palo Alto infrastructure. Support includes 24-hour assistance and documentation resources, with video and webinar training available. MSPs considering this product should verify whether their clients already have Palo Alto infrastructure in place, as it cannot be deployed independently of Palo Alto ecosystem requirements.
Advanced DNS Security is a specialist DNS filtering add-on exclusively for existing Palo Alto customers, not a standalone product suitable for all MSPs. It requires integration with Palo Alto firewalls (NGFW, Prisma Access, or proxy deployment) and is sold strictly on a quote basis with no published per-unit pricing. The 90-day free trial helps with evaluation, but the enterprise-only positioning and Palo Alto dependency make it unsuitable for MSPs using multi-vendor architectures. Suitable only for enterprise organizations already committed to Palo Alto's ecosystem. MSPs without Palo Alto firewalls should evaluate independent DNS filtering alternatives such as Cisco Umbrella, Cloudflare Gateway, DNSFilter, or Heimdal DNS Security instead.
OpenText Core DNS Protection DNS-layer threat blocking with agent-based enforcement for remote and hybrid endpoints. No reviews yet 
DNSFilter AI-powered DNS filtering and threat blocking for networks and roaming devices. No reviews yet · from US$1.00
Cisco Umbrella Cloud DNS filtering and secure web gateway for multi-site networks and roaming users. No reviews yet 
Infoblox Threat Defense Cloud-native DNS security with predictive threat intelligence and agentless deployment. No reviews yet All alternatives to Advanced DNS Security| Feature | Supported | Note |
|---|---|---|
| DNS-layer blocking | yes | Blocks malicious domains at DNS layer with real-time threat detection |
| Content category filtering | unknown | Not explicitly stated in vendor documentation |
| Roaming agent for off-network devices | unknown | Proxy-compatible deployment mentioned but no specific roaming agent details provided |
| Secure web gateway | unknown | DNS filtering only; secure web gateway not mentioned in product description |
| Multi-tenant dashboard | yes | Single console management for multi-site deployments |
| Per-site policy | yes | Centralized policy management through unified console |
| RMM integration | unknown | Integrates with Palo Alto firewalls; RMM integration not documented |
| Threat intelligence feed | yes | Blocks 157 million malicious domains daily using crowd-sourced threat intelligence |
| SafeSearch enforcement | unknown | Not mentioned in vendor documentation |
| Reporting and audit log | yes | Unified console provides reporting and monitoring capabilities |
| Custom block and allow lists | yes | Automated domain discovery and misconfiguration monitoring |
| Network-wide router deployment | yes | Native integration with Palo Alto NGFWs and Prisma Access for network-wide protection |
Yes, Palo Alto Networks Advanced DNS Security requires integration with either a Palo Alto NGFW or Palo Alto Prisma Access. Advanced DNS Security is not a standalone product and cannot be deployed independently without a Palo Alto firewall. Organizations without Palo Alto firewalls in place should evaluate alternative DNS filtering solutions that work with any firewall vendor or operate as fully independent cloud services.
Palo Alto Networks Advanced DNS Security is sold on a quote basis with no published per-unit pricing available on the vendor website. Pricing varies by organization size, deployment scale, contract terms, and whether it is purchased standalone or bundled with Palo Alto firewall subscriptions. Advanced DNS Security is typically included as part of Palo Alto firewall security subscription packages or sold as an add-on service subscription. A 90-day free trial is available for evaluation before making a purchase commitment.
Advanced DNS Security blocks over 157 million malicious domains daily using crowd-sourced threat intelligence collected from over 65,000 Palo Alto customers worldwide. The service uses AI-powered machine learning models to detect threats 6 times faster than competing DNS security vendors according to vendor claims. The cloud-delivered service provides what Palo Alto claims is 2 times more DNS-layer threat coverage than alternative solutions and includes automated monitoring of public-facing domains to detect DNS hijacking and misconfiguration attempts.
Advanced DNS Security can be deployed in proxy-compatible configuration to support organizations using DNS proxies, which can extend protection to roaming and remote endpoints. However, the primary deployment model requires integration with Palo Alto firewalls at network perimeter or via Prisma Access. Organizations with distributed remote workers should confirm proxy deployment compatibility and roaming endpoint coverage with Palo Alto during the evaluation process and free trial period to ensure it meets their remote work requirements.
Palo Alto Networks offers a 90-day free trial of Advanced DNS Security to allow hands-on evaluation before purchase. The trial includes full access to the DNS filtering and threat detection capabilities integrated with your existing Palo Alto firewall. During the trial period, you can evaluate threat detection performance, test policy configurations, and assess how the service integrates with your Palo Alto firewall management console to ensure it meets your organization's DNS security requirements before committing to a paid subscription.
Reviews are moderated. How reviews work.
Share what it is like to use this product day to day. Your experience helps other MSPs choose with confidence.
Write the first review
