New 'dynamic-dns' PAN-DB URL Filtering Category
Palo Alto Networks content update 475 introduced a new PAN-DB URL filtering category called 'dynamic-dns'. Some attackers leverage dynamic DNS services to rapidly change the IP addresses that host command and control servers and other malicious communications. This category will be populated with sites that utilize dynamic DNS services. Currently, the dynamic-dns category does not have any URLs associated with it. However, Palo Alto Networks will start populating the category in February 2015.
This new category requires a minimum PAN-OS version of 5.0.4, and a minimum content version of 475.
Note: PAN-OS 5.0.0 to 5.0.3 will not be able enforce URL filtering policies against sites categorized as dynamic-dns, nor will these sites appear in any URL logs.