Sold by: Palo Alto Networks
Deployed on AWS
Natively enforce Palo Alto Networks Advanced DNS Security on Amazon Route 53 Resolver DNS Firewall. Secure VPC and hybrid traffic against 30+ sophisticated threat dimensions with zero appliance overhead or architecture changes.
Overview
Product Overview
Palo Alto Networks Advanced DNS Security (ADNS) for Amazon Route 53 Resolver DNS Firewall bridges the gap between cloud infrastructure and elite network protection. This native integration injects Palo Alto Networks' industry-leading threat protection directly into the AWS core network plane. Security administrators can now seamlessly govern DNS query traffic originating from Amazon VPCs and hybrid cloud networks using trusted, enterprise-grade threat signatures and behavioral detection models - all configured directly within the native AWS console.
This integrated offering combines the ultra-low latency, native enforcement, and high availability of the Route 53 VPC Resolver with the real-time protection from ADNS. Through an embedded procurement experience, organizations can subscribe and instantly apply partner-managed advanced protections right where the traffic flows.
Manage Advanced DNS Security through the DNS Firewall section of the Amazon VPC console
Configuring Advanced DNS Security on Route 53 DNS Firewall involves four steps:
- Subscribe to Advanced DNS Security through the DNS Firewall console or AWS Marketplace.
- Create DNS Firewall rules by selecting Palo Alto Networks Advanced DNS security categories and specifying actions.
- Associate rule groups with VPCs to enforce DNS threat protections across your organization.
- Monitor DNS query activity through AWS CloudWatch metrics and Security Hub findings.
Comprehensive, Industry-Leading Threat Prevention
Security rules can be built to selectively BLOCK or ALERT against highly targeted threat categories, including:
- Command and Control (C2) and Malware: Halts malicious data exfiltration and phone-home vectors.
- Advanced Exploit Tactics: Real-time analysis catches fast-flux domains, proxy avoidance, dynamic DNS abuse, and DNS rebinding.
- Domain Abuse Categories: Proactive protection blocking newly registered domains (NRDs), domain squatting, parked domains, and grayware.
Native Analytics and Hybrid Network Security
Keep your visibility centralized. All blocked and alerted query events map directly into your native cloud ecosystem - streaming logs automatically to Amazon CloudWatch metrics and AWS Security Hub.
Highlights
- Seamless Native Integration: Manage ADNS through the DNS Firewall section of the Amazon VPC console.
- Unified Control Console: Subscribe, configure rule categories, and set actions inside the AWS console.
- Comprehensive Coverage with Precision AI: Block techniques like fast-flux, Advanced DGA, DNS Tunneling in real-time to stop sophisticated DNS threats.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/unit |
|---|---|
Advanced DNS Security Usage Hours (1 unit = 1 usage hour) | $0.30 |
Dimensions summary
This listing uses a single usage-based dimension. You pay by the hour, where 1 unit equals 1 usage hour of Advanced DNS Security. Billing accrues based on how many hours you run the service, so your cost scales directly with usage. There are no separate tiers, seat counts, or instance sizes to choose. A 30-day free trial applies before pay-as-you-go charges begin. This structure suits buyers who want costs tied to actual consumption rather than a fixed upfront commitment.
Top-of-mind questions for buyers
One unit equals one hour of running the service against your Amazon Route 53 Resolver DNS Firewall. The service inspects DNS queries and responses in real time while active. Billing accrues for each hour the service runs, regardless of how many DNS requests it processes during that hour.
Charges accrue only for hours the service is active. Since billing is tied to usage hours, stopping the service stops the meter. Your cost tracks the number of hours you actually run Advanced DNS Security, with no fixed fee for idle time.
This is pay-as-you-go. You pay by the usage hour with no upfront commitment, no seat counts, and no instance sizes to pick. Your bill reflects actual hours run. This suits variable workloads where you prefer costs to follow consumption rather than a fixed term.
www.paloaltonetworks.com
Helpful?
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
Premium support is now included with the product: https://www.paloaltonetworks.com/resources/datasheets/premium-support . To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit: https://www.youtube.com/watch?v=u33KRLekaBs . For post-sales support, you can use the following options: 1) Open a case by following the steps here: https://www.paloaltonetworks.com/services/support/customer-support-plan . 2) Call us at 1 (866) 898-9087
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Fully managed DNS services for Amazon Route 53 on AWS, ensuring high availability, security, and performance. We handle DNS configuration, monitoring, optimization, and troubleshooting, enabling businesses to maintain reliable and scalable domain infrastructure without operational overhead.
OneData Software uses Amazon Route 53 to manage DNS and ensure high availability for web applications, routing end users to healthy endpoints with traffic policies, health checks, and failover. They implement Route 53 configurations as part of migration or hosting solutions (e.g., Collegely.io) to improve scalability, reliability, and user experience. This ensures minimal downtime and efficient user traffic flow globally.
Storm Reply delivers a production-proven hybrid DNS service that connects your on-premises Infoblox DNS with Amazon Route 53 across your entire AWS Organization. Route 53 Resolver inbound and outbound endpoints in a central DNS VPC, forwarding rules shared via AWS Resource Access Manager and an automated, tag-driven synchronization of Route 53 private hosted zones into your Infoblox Grid let every account and VPC resolve on-premises and cloud names alike - without running a single self-managed DNS server. The solution is serverless, deployed as Infrastructure as Code, spans multiple Availability Zones and AWS Regions, and ships with monitoring, alerting, a complete operations concept and optional 24x7 managed operations. Application teams onboard with one tag; platform teams keep one central, auditable configuration.
Expand your coverage against command and control, web-based, file-based, DNS protocol, and other threats with industries most advanced cloud delivered security services that protect your AWS workloads, VDIs and user traffic with AI/ML-powered VM-Series virtual firewalls from Palo Alto Networks. This listing includes 24x7 Premium Support.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.