DNS Firewall Advanced Rules - Amazon Route 53
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

DNS Firewall Advanced Rules

DNS Firewall Advanced Rule tier provides you with protections to help you detect and monitor for more advanced DNS threats (for example, Domain Generation Algorithms (DGA) or DNS Tunneling) or with more granular protections based on threat and web-content (for example, gambling, social networking).

There are three main types of advanced rules:

  • Advanced Protections that help detect suspicious DNS queries based on known threat signatures (for example, DGA) in DNS queries.

  • Advanced DNS threat and content categories that provide more granular control to block DNS queries based on the type of DNS threats (for example, spam, phishing) or web content (for example, adult content, social networking, gambling sites).

  • Partner Managed DNS protections from Palo Alto Networks Advanced DNS Security (requires AWS Marketplace subscription).