DNS tunnels have long been a vector for data exfiltration and C2 (Command and Control) communication. PAN-OS 11.0 decouples DNS security from the standard Threat Prevention license into a dedicated capability.
: The PAN-OS 11.0 Release Notes landing page provides a comprehensive list of known and addressed issues for the base 11.0.0 version and subsequent updates. panos 11 release notes link
With PAN-OS 11.0, IoT visibility is no longer an add-on requiring a separate subscription portal for basic profiling. DNS tunnels have long been a vector for
Her team started using machine learning to predict potential misconfigurations and health issues before they caused downtime. panos 11 release notes link