DNS traffic has to be allowed in every infrastructure, so it is the ideal channel for data exfiltration or other forms of DNS malicious activities. Palo Alto Networks Firewall DNS subscription covers and secure wide range of DNS attacks, in fact Palo Alto Networks DNS Security recognizes and prevents more DNS attack techniques then any other vendor.