Amazon Route 53 Resolver DNS Firewall now supports Palo Alto Networks Advanced DNS Security (Preview)

This article announces the preview of Palo Alto Networks Advanced DNS Security integration with Amazon Route 53 Resolver DNS Firewall, enabling unified DNS threat protection across AWS and hybrid environments.

• Enforce DNS threat protections including Command and Control, Malware, Phishing, and Newly Registered Domains directly in DNS Firewall rules
• Eliminate need for separate PANW firewalls per VPC or account with centralized deployment
• Leverage PANW threat intelligence including fast-flux protection, DNS tunneling detection, and DGA detection
• Support multi-account management through AWS RAM, Route 53 Profiles, and AWS Firewall Manager
• Gain centralized visibility via AWS Security Hub findings and query logs in S3, Firehose, or CloudWatch Logs
• Available in preview across eight AWS regions with no additional DNS Firewall charges during preview

This integration simplifies DNS security operations by combining AWS-managed domain lists with Palo Alto Networks threat intelligence for comprehensive protection.