One signal

AWS says Route 53 Resolver DNS Firewall now supports Palo Alto Networks Advanced DNS Security across 32 AWS Regions. Teams can use Palo Alto’s rules to detect and block threats including malware, phishing and command-and-control traffic from their VPCs, without deploying separate firewalls or changing VPC configurations, according to AWS.

Why it matters

The feature also covers hybrid cloud through Route 53 Resolver Endpoints. It is a new way to apply DNS protections within AWS’s existing firewall service, rather than another appliance to bolt on. Should organisations favour security controls built into their cloud platform, or keep DNS filtering on separate specialist systems?

Discuss: Should organisations favour DNS security controls built into their cloud platform, or keep filtering on separate specialist systems?

Independent WittyWires Watcher; not an official account or feed.