# Advanced DNS Security

> Cloud DNS security for Palo Alto firewalls, blocking 157 million malicious domains daily.

Advanced DNS Security is a cloud-delivered DNS filtering and threat prevention service that requires integration with Palo Alto firewalls. It is sold on a quote basis for enterprise organisations. Listing updated 6 September 2026. Checked by MSP Software 6 September 2026.

- Page: https://mspsoftware.net/software/palo-alto-dns-security
- Vendor: Palo Alto Networks, https://mspsoftware.net/vendors/palo-alto-networks, website https://www.paloaltonetworks.com/network-security/dns-security
- Categories: DNS and web filtering (primary)
- Free trial: yes. Free version: no.
- Deployment: cloud. Platforms: web. HQ: United States. Founded: 2005.
- Support: email, phone, help desk and 24/7. Training: documentation, videos and webinars.

## From the vendor

Advanced DNS Security is a cloud-delivered DNS filtering service from Palo Alto Networks designed for organizations that have deployed Palo Alto firewalls. It provides real-time detection of malicious domains using AI-powered machine learning models and blocks over 157 million malicious domains daily from crowd-sourced threat intelligence collected across over 65,000 customers worldwide. The service uses detection algorithms that are 6 times faster than competing DNS security vendors according to vendor benchmarks. It integrates natively with Palo Alto NGFW and Prisma Access, as well as supporting proxy-compatible deployments for organizations using DNS proxies or hybrid network architectures. The product includes automated DNS hijacking prevention with continuous monitoring of public-facing domains to detect misconfiguration and takeover attempts. It delivers centralized management through a single console without requiring DNS traffic rerouting or infrastructure changes, making deployment faster for organizations already running Palo Alto firewalls. Advanced DNS Security offers a 90-day free trial to evaluate the service in production before committing to a subscription. Pricing is not published on the vendor website and must be obtained through direct quotes from Palo Alto Networks sales representatives. Typical deployment is enterprise-focused, targeted at organizations with 50 or more employees seeking to add DNS-layer threat detection to their existing Palo Alto firewall deployments. The product requires an existing Palo Alto firewall and is not available as a standalone DNS filtering solution for organizations without Palo Alto infrastructure. Support includes 24-hour assistance and documentation resources, with video and webinar training available. MSPs considering this product should verify whether their clients already have Palo Alto infrastructure in place, as it cannot be deployed independently of Palo Alto ecosystem requirements.

## Our take

Advanced DNS Security is a specialist DNS filtering add-on exclusively for existing Palo Alto customers, not a standalone product suitable for all MSPs. It requires integration with Palo Alto firewalls (NGFW, Prisma Access, or proxy deployment) and is sold strictly on a quote basis with no published per-unit pricing. The 90-day free trial helps with evaluation, but the enterprise-only positioning and Palo Alto dependency make it unsuitable for MSPs using multi-vendor architectures. Suitable only for enterprise organizations already committed to Palo Alto's ecosystem. MSPs without Palo Alto firewalls should evaluate independent DNS filtering alternatives such as Cisco Umbrella, Cloudflare Gateway, DNSFilter, or Heimdal DNS Security instead.

## Pricing

Advanced DNS Security does not publish a list price.

## Features

| Feature | Supported | Note |
| --- | --- | --- |
| DNS-layer blocking | yes | Blocks malicious domains at DNS layer with real-time threat detection |
| Multi-tenant dashboard | yes | Single console management for multi-site deployments |
| Per-site policy | yes | Centralized policy management through unified console |
| Threat intelligence feed | yes | Blocks 157 million malicious domains daily using crowd-sourced threat intelligence |
| Reporting and audit log | yes | Unified console provides reporting and monitoring capabilities |
| Custom block and allow lists | yes | Automated domain discovery and misconfiguration monitoring |
| Network-wide router deployment | yes | Native integration with Palo Alto NGFWs and Prisma Access for network-wide protection |

## Integrations

- Palo Alto Networks NGFW, https://www.paloaltonetworks.com/network-security/next-generation-firewall
- Palo Alto Networks Prisma Access, https://www.paloaltonetworks.com/sase/secure-access-service-edge

Listed products that integrate with Advanced DNS Security: DNSSense.

## Alternatives

- OpenText Core DNS Protection: DNS-layer threat blocking with agent-based enforcement for remote and hybrid endpoints. https://mspsoftware.net/software/webroot-dns-protection
- DNSFilter: AI-powered DNS filtering and threat blocking for networks and roaming devices. https://mspsoftware.net/software/dnsfilter. Compare: https://mspsoftware.net/compare/dnsfilter-vs-palo-alto-dns-security
- Cisco Umbrella: Cloud DNS filtering and secure web gateway for multi-site networks and roaming users. https://mspsoftware.net/software/cisco-umbrella
- Infoblox Threat Defense: Cloud-native DNS security with predictive threat intelligence and agentless deployment. https://mspsoftware.net/software/infoblox-threat-defense

## FAQ

### How much does Advanced DNS Security cost?

Advanced DNS Security does not publish a list price. No MSP price reports have been approved yet.

### Does Advanced DNS Security offer a free trial?

Advanced DNS Security offers a free trial. There is no free version.

### What does Advanced DNS Security integrate with?

Advanced DNS Security lists integrations with Palo Alto Networks NGFW and Palo Alto Networks Prisma Access.

### What integrates with Advanced DNS Security?

DNSSense lists an integration with Advanced DNS Security.

### Is Advanced DNS Security cloud or on-premises?

Advanced DNS Security is cloud-hosted; there is no on-premises version.

### Who is Advanced DNS Security for?

MSPs report using Advanced DNS Security at sizes of 51-200 and 200+ technicians.

### Do I need a Palo Alto firewall to use Advanced DNS Security?

Yes, Palo Alto Networks Advanced DNS Security requires integration with either a Palo Alto NGFW or Palo Alto Prisma Access. Advanced DNS Security is not a standalone product and cannot be deployed independently without a Palo Alto firewall. Organizations without Palo Alto firewalls in place should evaluate alternative DNS filtering solutions that work with any firewall vendor or operate as fully independent cloud services.

### How is Advanced DNS Security priced?

Palo Alto Networks Advanced DNS Security is sold on a quote basis with no published per-unit pricing available on the vendor website. Pricing varies by organization size, deployment scale, contract terms, and whether it is purchased standalone or bundled with Palo Alto firewall subscriptions. Advanced DNS Security is typically included as part of Palo Alto firewall security subscription packages or sold as an add-on service subscription. A 90-day free trial is available for evaluation before making a purchase commitment.

### What threat intelligence does Advanced DNS Security use?

Advanced DNS Security blocks over 157 million malicious domains daily using crowd-sourced threat intelligence collected from over 65,000 Palo Alto customers worldwide. The service uses AI-powered machine learning models to detect threats 6 times faster than competing DNS security vendors according to vendor claims. The cloud-delivered service provides what Palo Alto claims is 2 times more DNS-layer threat coverage than alternative solutions and includes automated monitoring of public-facing domains to detect DNS hijacking and misconfiguration attempts.

### Can Advanced DNS Security protect roaming and remote endpoints?

Advanced DNS Security can be deployed in proxy-compatible configuration to support organizations using DNS proxies, which can extend protection to roaming and remote endpoints. However, the primary deployment model requires integration with Palo Alto firewalls at network perimeter or via Prisma Access. Organizations with distributed remote workers should confirm proxy deployment compatibility and roaming endpoint coverage with Palo Alto during the evaluation process and free trial period to ensure it meets their remote work requirements.

### What is included in the 90-day free trial?

Palo Alto Networks offers a 90-day free trial of Advanced DNS Security to allow hands-on evaluation before purchase. The trial includes full access to the DNS filtering and threat detection capabilities integrated with your existing Palo Alto firewall. During the trial period, you can evaluate threat detection performance, test policy configurations, and assess how the service integrates with your Palo Alto firewall management console to ensure it meets your organization's DNS security requirements before committing to a paid subscription.