AWS First Steps
LanguageEnglish
New feature

Amazon Route 53 Resolver DNS Firewall support for Palo Alto Networks Advanced DNS Security is now Generally Available (GA)

Amazon Route 53 Resolver DNS Firewall now generally available with Palo Alto Networks Advanced DNS Security across 32 AWS regions, enabling security teams to detect and block malicious DNS traffic directly from VPCs using PANW rules

Amazon Route 53 Resolver DNS Firewall now generally supports Palo Alto Networks Advanced DNS Security across 32 AWS regions. This allows security teams to detect and block malicious DNS traffic directly from VPCs using PANW Advanced DNS Security rules without altering firewalls or VPC configurations. The feature, previewed at AWS Summit New York City, enables security administrators to apply DNS threat protection-such as command and control, malware, phishing, and newly registered domains-using Route 53 DNS Firewall rules against queries from Amazon VPCs and hybrid clouds via Route 53 Resolver endpoints. Customers can subscribe and enable the feature directly in the Route 53 DNS Firewall console, share licenses across organization accounts via AWS License Manager, and associate DNS Firewall rule groups containing PANW rules with VPCs using AWS Resource Access Manager, Route 53 profiles, or AWS Firewall Manager.

Why it matters

This update enhances AWS's DNS firewall capabilities by integrating Palo Alto Networks' advanced DNS security, strengthening protection against DNS-based threats in cloud environments.

Read the original AWS announcement

Related articles and terms

What Is the VPC .2 Resolver? - AWS Internal DNS and Its Relationship with Route 53 ResolverLearn what the DNS resolver at the CIDR+2 address inside a VPC actually is, how it works with private hosted zones, how Route 53 Resolver endpoints enable hybrid DNS, and how to use DNS query logs.The Story Behind Route 53's Name and DNS Trivia - Why Port 53, and Why UDPStarting with how Route 53 got its name from port number 53 and America's Route 66, this article explores why DNS uses UDP port 53, and what happens behind the scenes during DNS resolution.Centralized Security Rules with AWS Firewall Manager - Deploying WAF and Security Groups Across Your OrganizationLearn how to centrally manage WAF rules, Security Groups, and Network Firewall policies across your entire organization, with automatic enforcement on new accounts to maintain a consistent security baseline.AWS Firewall ManagerA security management service that centrally applies and manages WAF, Shield Advanced, Security Group, and Network Firewall rules across multiple accounts and resources under OrganizationsVPC Traffic Control with AWS Network Firewall - Stateful Rules and Domain FilteringControl VPC traffic with stateful/stateless rules and domain filtering. Learn how to leverage Suricata-compatible rules and managed rule groups.