[](https://www.paloaltonetworks.com/?ts=markdown)

* Sign In
  
  * Customer
  * Partner
  * Employee
  * [Login to download](https://www.paloaltonetworks.com/login?ts=markdown)
  * [Join us to become a member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown)

* EN
  
  * [USA (ENGLISH)](https://www.paloaltonetworks.com)
  * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au)
  * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br)
  * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca)
  * [CHINA (简体中文)](https://www.paloaltonetworks.cn)
  * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr)
  * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de)
  * [INDIA (ENGLISH)](https://www.paloaltonetworks.in)
  * [ITALY (ITALIANO)](https://www.paloaltonetworks.it)
  * [JAPAN (日本語)](https://www.paloaltonetworks.jp)
  * [KOREA (한국어)](https://www.paloaltonetworks.co.kr)
  * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat)
  * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx)
  * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg)
  * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es)
  * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw)
  * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk)

* ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg)

* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)

* [What's New](https://www.paloaltonetworks.com/resources?ts=markdown)

* [Get Support](https://support.paloaltonetworks.com/SupportAccount/MyAccount)

* [Under Attack?](https://start.paloaltonetworks.com/contact-unit42.html)
  ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Palo Alto Networks logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)](https://www.paloaltonetworks.com/?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg)

* [](https://www.paloaltonetworks.com/?ts=markdown)

* Products  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Products  
  [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)
  
  * [AI Security](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)
  
  * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)
  
  * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)
  
  * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)
  
  * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)
  
  * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)
  
  * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)
  
  * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)
  
  * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)
  
  * [Enterprise Device Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)
  
  * [Medical Device Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)
  
  * [OT Device Security](https://www.paloaltonetworks.com/network-security/ot-device-security?ts=markdown)
  
  * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)
  
  * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)
  
  * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)
  
  * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)
  
  * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)
  
  * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)
  
  * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)
  
  * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)
  
  * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)
  
  * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)
  
  * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)
  
  * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)
  
  * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)
  
  * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)
  
  * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)
  
  * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)
  
  * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)
  
  * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)  
    [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)
  
  * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)
  
  * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)
  
  * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)
  
  * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)
  
  * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)
  
  * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)
  
  * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)
  
  * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)
  
  * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)
  
  * [Cortex AgentiX](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown)
  
  * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)
  
  * [Cortex Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown)
  
  * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)
  
  * [Cortex Advanced Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown)
  
  * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)
  
  * [Unit 42 Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* Solutions  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Solutions  
  Secure AI by Design
  
  * [Secure AI Ecosystem](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)
  * [Secure GenAI Usage](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)  
    Network Security
  * [Cloud Network Security](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)
  * [Data Center Security](https://www.paloaltonetworks.com/network-security/data-center?ts=markdown)
  * [DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)
  * [Intrusion Detection and Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)
  * [Device Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown)
  * [OT Security](https://www.paloaltonetworks.com/network-security/ot-device-security?ts=markdown)
  * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown)
  * [Secure All Apps, Users and Locations](https://www.paloaltonetworks.com/sase/secure-users-data-apps-devices?ts=markdown)
  * [Secure Branch Transformation](https://www.paloaltonetworks.com/sase/secure-branch-transformation?ts=markdown)
  * [Secure Work on Any Device](https://www.paloaltonetworks.com/sase/secure-work-on-any-device?ts=markdown)
  * [VPN Replacement](https://www.paloaltonetworks.com/sase/vpn-replacement-for-secure-remote-access?ts=markdown)
  * [Web \& Phishing Security](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)  
    Cloud Security
  * [Application Security Posture Management (ASPM)](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown)
  * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown)
  * [Code Security](https://www.paloaltonetworks.com/cortex/cloud/code-security?ts=markdown)
  * [Cloud Security Posture Management (CSPM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown)
  * [Cloud Infrastructure Entitlement Management (CIEM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown)
  * [Data Security Posture Management (DSPM)](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown)
  * [AI Security Posture Management (AI-SPM)](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown)
  * [Cloud Detection \& Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown)
  * [Cloud Workload Protection (CWP)](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown)
  * [Web Application \& API Security (WAAS)](https://www.paloaltonetworks.com/cortex/cloud/web-app-api-security?ts=markdown)  
    Security Operations
  * [Cloud Detection \& Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown)
  * [Security Information and Event Management](https://www.paloaltonetworks.com/cortex/modernize-siem?ts=markdown)
  * [Network Security Automation](https://www.paloaltonetworks.com/cortex/network-security-automation?ts=markdown)
  * [Incident Case Management](https://www.paloaltonetworks.com/cortex/incident-case-management?ts=markdown)
  * [SOC Automation](https://www.paloaltonetworks.com/cortex/security-operations-automation?ts=markdown)
  * [Threat Intel Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown)
  * [Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)
  * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management?ts=markdown)
  * [Compliance Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/compliance-management?ts=markdown)
  * [Internet Operations Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/internet-operations-management?ts=markdown)
  * [Extended Data Lake (XDL)](https://www.paloaltonetworks.com/cortex/cortex-xdl?ts=markdown)
  * [Agentic Assistant](https://www.paloaltonetworks.com/cortex/cortex-agentic-assistant?ts=markdown)  
    Endpoint Security
  * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown)
  * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/detection-and-response?ts=markdown)
  * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown)
  * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown)  
    [Industries](https://www.paloaltonetworks.com/industry?ts=markdown)
  * [Public Sector](https://www.paloaltonetworks.com/industry/public-sector?ts=markdown)
  * [Financial Services](https://www.paloaltonetworks.com/industry/financial-services?ts=markdown)
  * [Manufacturing](https://www.paloaltonetworks.com/industry/manufacturing?ts=markdown)
  * [Healthcare](https://www.paloaltonetworks.com/industry/healthcare?ts=markdown)
  * [Small \& Medium Business Solutions](https://www.paloaltonetworks.com/industry/small-medium-business-portfolio?ts=markdown)

* Services  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Services  
  [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)
  
  * [Assess](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)
  
  * [AI Security Assessment](https://www.paloaltonetworks.com/unit42/assess/ai-security-assessment?ts=markdown)
  
  * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/assess/attack-surface-assessment?ts=markdown)
  
  * [Breach Readiness Review](https://www.paloaltonetworks.com/unit42/assess/breach-readiness-review?ts=markdown)
  
  * [BEC Readiness Assessment](https://www.paloaltonetworks.com/bec-readiness-assessment?ts=markdown)
  
  * [Cloud Security Assessment](https://www.paloaltonetworks.com/unit42/assess/cloud-security-assessment?ts=markdown)
  
  * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/assess/compromise-assessment?ts=markdown)
  
  * [Cyber Risk Assessment](https://www.paloaltonetworks.com/unit42/assess/cyber-risk-assessment?ts=markdown)
  
  * [M\&A Cyber Due Diligence](https://www.paloaltonetworks.com/unit42/assess/mergers-acquisitions-cyber-due-diligence?ts=markdown)
  
  * [Penetration Testing](https://www.paloaltonetworks.com/unit42/assess/penetration-testing?ts=markdown)
  
  * [Purple Team Exercises](https://www.paloaltonetworks.com/unit42/assess/purple-teaming?ts=markdown)
  
  * [Ransomware Readiness Assessment](https://www.paloaltonetworks.com/unit42/assess/ransomware-readiness-assessment?ts=markdown)
  
  * [SOC Assessment](https://www.paloaltonetworks.com/unit42/assess/soc-assessment?ts=markdown)
  
  * [Supply Chain Risk Assessment](https://www.paloaltonetworks.com/unit42/assess/supply-chain-risk-assessment?ts=markdown)
  
  * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/assess/tabletop-exercise?ts=markdown)
  
  * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown)
  
  * [Respond](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)
  
  * [Cloud Incident Response](https://www.paloaltonetworks.com/unit42/respond/cloud-incident-response?ts=markdown)
  
  * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown)
  
  * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown)
  
  * [Managed Detection and Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown)
  
  * [Managed Threat Hunting](https://www.paloaltonetworks.com/unit42/respond/managed-threat-hunting?ts=markdown)
  
  * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)
  
  * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown)
  
  * [Transform](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)
  
  * [IR Plan Development and Review](https://www.paloaltonetworks.com/unit42/transform/incident-response-plan-development-review?ts=markdown)
  
  * [Security Program Design](https://www.paloaltonetworks.com/unit42/transform/security-program-design?ts=markdown)
  
  * [Virtual CISO](https://www.paloaltonetworks.com/unit42/transform/vciso?ts=markdown)
  
  * [Zero Trust Advisory](https://www.paloaltonetworks.com/unit42/transform/zero-trust-advisory?ts=markdown)  
    [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown)
  
  * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown)
  
  * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown)
  
  * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown)
  
  * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown)
  
  * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown)  
    [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-unit-42.svg)  
    UNIT 42 RETAINER
    Custom-built to fit your organization's needs, you can choose to allocate your retainer hours to any of our offerings, including proactive cyber risk management services. Learn how you can put the world-class Unit 42 Incident Response team on speed dial.
    Learn more](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown)

* Partners  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Partners  
  NextWave Partners
  
  * [NextWave Partner Community](https://www.paloaltonetworks.com/partners?ts=markdown)
  * [Cloud Service Providers](https://www.paloaltonetworks.com/partners/nextwave-for-csp?ts=markdown)
  * [Global Systems Integrators](https://www.paloaltonetworks.com/partners/nextwave-for-gsi?ts=markdown)
  * [Technology Partners](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown)
  * [Service Providers](https://www.paloaltonetworks.com/partners/service-providers?ts=markdown)
  * [Solution Providers](https://www.paloaltonetworks.com/partners/nextwave-solution-providers?ts=markdown)
  * [Managed Security Service Providers](https://www.paloaltonetworks.com/partners/managed-security-service-providers?ts=markdown)
  * [XMDR Partners](https://www.paloaltonetworks.com/partners/managed-security-service-providers/xmdr?ts=markdown)  
    Take Action
  * [Portal Login](https://www.paloaltonetworks.com/partners/nextwave-partner-portal?ts=markdown)
  * [Managed Services Program](https://www.paloaltonetworks.com/partners/managed-security-services-provider-program?ts=markdown)
  * [Become a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=becomepartner)
  * [Request Access](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=requestaccess)
  * [Find a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerlocator)  
    [CYBERFORCE
    CYBERFORCE represents the top 1% of partner engineers trusted for their security expertise.
    Learn more](https://www.paloaltonetworks.com/cyberforce?ts=markdown)

* Company  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Company  
  Palo Alto Networks
  
  * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
  * [Management Team](https://www.paloaltonetworks.com/about-us/management?ts=markdown)
  * [Investor Relations](https://investors.paloaltonetworks.com)
  * [Locations](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
  * [Ethics \& Compliance](https://www.paloaltonetworks.com/company/ethics-and-compliance?ts=markdown)
  * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
  * [Military \& Veterans](https://jobs.paloaltonetworks.com/military)  
    [Why Palo Alto Networks?](https://www.paloaltonetworks.com/why-paloaltonetworks?ts=markdown)
  * [Precision AI Security](https://www.paloaltonetworks.com/precision-ai-security?ts=markdown)
  * [Our Platform Approach](https://www.paloaltonetworks.com/why-paloaltonetworks/platformization?ts=markdown)
  * [Accelerate Your Cybersecurity Transformation](https://www.paloaltonetworks.com/why-paloaltonetworks/nam-cxo-portfolio?ts=markdown)
  * [Awards \& Recognition](https://www.paloaltonetworks.com/about-us/awards?ts=markdown)
  * [Customer Stories](https://www.paloaltonetworks.com/customers?ts=markdown)
  * [Global Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
  * [Trust 360 Program](https://www.paloaltonetworks.com/resources/whitepapers/trust-360?ts=markdown)  
    Careers
  * [Overview](https://jobs.paloaltonetworks.com/)
  * [Culture \& Benefits](https://jobs.paloaltonetworks.com/en/culture/)  
    [A Newsweek Most Loved Workplace
    "Businesses that do right by their employees"
    Read more](https://www.paloaltonetworks.com/company/press/2021/palo-alto-networks-secures-top-ranking-on-newsweek-s-most-loved-workplaces-list-for-2021?ts=markdown)

* More  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) More  
  Resources
  
  * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
  * [Unit 42 Threat Research](https://unit42.paloaltonetworks.com/)
  * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
  * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
  * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
  * [Tech Insider](https://techinsider.paloaltonetworks.com/)
  * [Knowledge Base](https://knowledgebase.paloaltonetworks.com/)
  * [Palo Alto Networks TV](https://tv.paloaltonetworks.com/)
  * [Perspectives of Leaders](https://www.paloaltonetworks.com/perspectives/?ts=markdown)
  * [Cyber Perspectives Magazine](https://www.paloaltonetworks.com/cybersecurity-perspectives/cyber-perspectives-magazine?ts=markdown)
  * [Regional Cloud Locations](https://www.paloaltonetworks.com/products/regional-cloud-locations?ts=markdown)
  * [Tech Docs](https://docs.paloaltonetworks.com/)
  * [Security Posture Assessment](https://www.paloaltonetworks.com/security-posture-assessment?ts=markdown)
  * [Threat Vector Podcast](https://unit42.paloaltonetworks.com/unit-42-threat-vector-podcast/)
  * [Packet Pushers Podcasts](https://www.paloaltonetworks.com/podcasts/packet-pusher?ts=markdown)  
    Connect
  * [LIVE community](https://live.paloaltonetworks.com/)
  * [Events](https://events.paloaltonetworks.com/)
  * [Executive Briefing Center](https://www.paloaltonetworks.com/about-us/executive-briefing-program?ts=markdown)
  * [Demos](https://www.paloaltonetworks.com/demos?ts=markdown)
  * [Contact us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)  
    [Blog
    Stay up-to-date on industry trends and the latest innovations from the world's largest cybersecurity
    Learn more](https://www.paloaltonetworks.com/blog/)

* Sign In  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Sign In
  
  * Customer
  * Partner
  * Employee
  * [Login to download](https://www.paloaltonetworks.com/login?ts=markdown)
  * [Join us to become a member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown)

* EN  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Language
  
  * [USA (ENGLISH)](https://www.paloaltonetworks.com)
  * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au)
  * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br)
  * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca)
  * [CHINA (简体中文)](https://www.paloaltonetworks.cn)
  * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr)
  * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de)
  * [INDIA (ENGLISH)](https://www.paloaltonetworks.in)
  * [ITALY (ITALIANO)](https://www.paloaltonetworks.it)
  * [JAPAN (日本語)](https://www.paloaltonetworks.jp)
  * [KOREA (한국어)](https://www.paloaltonetworks.co.kr)
  * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat)
  * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx)
  * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg)
  * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es)
  * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw)
  * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk)

* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)

* [What's New](https://www.paloaltonetworks.com/resources?ts=markdown)

* [Get support](https://support.paloaltonetworks.com/SupportAccount/MyAccount)

* [Under Attack?](https://start.paloaltonetworks.com/contact-unit42.html)

* [Demos and Trials](https://www.paloaltonetworks.com/get-started?ts=markdown)  
  Search  
  All

* [Tech Docs](https://docs.paloaltonetworks.com/search)  
  Close search modal
  [Deploy Bravely --- Secure your AI transformation with Prisma AIRS](https://www.deploybravely.com)  
  [](https://www.paloaltonetworks.com/?ts=markdown)

1. [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
2. [Network Security](https://www.paloaltonetworks.com/cyberpedia/network-security?ts=markdown)
3. [What Is Dynamic DNS (DDNS)?](https://www.paloaltonetworks.com/cyberpedia/what-is-dynamic-dns?ts=markdown)  
   Table of contents

* [What created the need for DDNS?](#what-created-the-need-for-dnns)
* [How does DDNS work?](#how-does-ddns-work)
* [What does DDNS help with?](#what-does-ddns-help-with)
* [What are the benefits of DDNS?](#what-are-the-benefits-of-ddns)
* [What are the different types of DDNS implementations?](#what-are-the-different-types-of-ddns-implementations)
* [What are the security risks of DDNS?](#what-are-the-security-risks-of-ddns)
* [What is the difference between DNS and DDNS?](#what-is-the-difference-between-dns-and-ddns)
* [Dynamic DNS FAQs](#dynamic-dns-faqs)

# What Is Dynamic DNS (DDNS)?

6 min. read  
Table of contents

* [What created the need for DDNS?](#what-created-the-need-for-dnns)
* [How does DDNS work?](#how-does-ddns-work)
* [What does DDNS help with?](#what-does-ddns-help-with)
* [What are the benefits of DDNS?](#what-are-the-benefits-of-ddns)
* [What are the different types of DDNS implementations?](#what-are-the-different-types-of-ddns-implementations)
* [What are the security risks of DDNS?](#what-are-the-security-risks-of-ddns)
* [What is the difference between DNS and DDNS?](#what-is-the-difference-between-dns-and-ddns)
* [Dynamic DNS FAQs](#dynamic-dns-faqs)

1. What created the need for DDNS?

* [1. What created the need for DDNS?](#what-created-the-need-for-dnns)
* [2. How does DDNS work?](#how-does-ddns-work)
* [3. What does DDNS help with?](#what-does-ddns-help-with)
* [4. What are the benefits of DDNS?](#what-are-the-benefits-of-ddns)
* [5. What are the different types of DDNS implementations?](#what-are-the-different-types-of-ddns-implementations)
* [6. What are the security risks of DDNS?](#what-are-the-security-risks-of-ddns)
* [7. What is the difference between DNS and DDNS?](#what-is-the-difference-between-dns-and-ddns)
* [8. Dynamic DNS FAQs](#dynamic-dns-faqs)  
  ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-dynamic-dns/what-is-dynamic-dns-video-thumbnail.png)  
  close  
  Dynamic DNS is a service that automatically updates a domain name's DNS record when its associated IP address changes.

It allows devices with frequently changing IP addresses to remain reachable through a consistent domain name. This is commonly used when internet service providers assign dynamic IPs instead of static ones.

While traditional DNS is widely used across all internet-connected systems, DDNS is a more niche utility.

It's not generally considered an enterprise-scale solution.

## What created the need for DDNS?

As home and small business internet access became common, internet service providers began assigning dynamic IP addresses---temporary addresses that could change at any time.

This approach helped providers manage limited address space, but it created a challenge for users who needed consistent remote access to their networks.  
![A diagram titled 'Limitations of DHCP for internet-facing devices' shows a home network on the left with an icon representing 'mywebsite.com' connected to a router. The router sends a 'DHCP request to ISP' and receives a 'Dynamic IP assigned from pool'. This IP connects through the internet, represented by a horizontal gray bar labeled 'Internet', to a 'Cloud DNS' server shown in the top right. The DNS server responds with the old IP address, which is sent to 'Users' at the bottom right attempting to connect to 'mywebsite.com'. These users receive a '404 not found' error due to the outdated DNS record. Blue arrows illustrate the flow of DNS queries and responses, highlighting the issue of mismatched IP addresses.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-dynamic-dns/DNSDynamic2025_6.png "A diagram titled 'Limitations of DHCP for internet-facing devices' shows a home network on the left with an icon representing 'mywebsite.com' connected to a router. The router sends a 'DHCP request to ISP' and receives a 'Dynamic IP assigned from pool'. This IP connects through the internet, represented by a horizontal gray bar labeled 'Internet', to a 'Cloud DNS' server shown in the top right. The DNS server responds with the old IP address, which is sent to 'Users' at the bottom right attempting to connect to 'mywebsite.com'. These users receive a '404 not found' error due to the outdated DNS record. Blue arrows illustrate the flow of DNS queries and responses, highlighting the issue of mismatched IP addresses.")

If your IP address changes without warning, it becomes difficult to connect to devices like personal servers, smart home systems, or remote desktop setups. You might not know the current address. And even if you do, it might change again tomorrow.

That's where dynamic [DNS](https://www.paloaltonetworks.com/cyberpedia/what-is-dns) comes in.

It automatically updates the DNS record associated with your domain name whenever your IP address changes. That way, your hostname always points to the correct address, no matter how often your ISP changes it.

## How does DDNS work?

Dynamic DNS starts with a domain name registered through a DDNS provider.

The provider hosts the DNS records and updates them automatically whenever your IP address changes.

A DDNS client---either running on a local device or built into your router---monitors your public IP and triggers those updates when needed.  
![A labeled architecture diagram titled 'How DDNS works' illustrates the process of updating and resolving a dynamic IP address using a dynamic DNS (DDNS) service. At the top, a horizontal arrow labeled 'Dynamic IP address changed' shows an address changing from '198.51.100.22' to '198.51.100.47'. In step 1, two desktop icons on either side send updated IP information to a central DDNS server icon, with a label that reads 'The host device sends its current IP address to the DDNS service'. In step 2, a user icon at the bottom left performs a lookup query to the DDNS server, labeled 'A user looks up the domain (e.g., example.ddns-provider.com) and the DDNS server returns the latest IP'. In step 3, the user icon connects to the host, now resolved to the updated IP, with the label 'The user connects to the domain, which now resolves to the updated IP address'. Blue arrows visually guide the sequence of these steps in a clockwise flow.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-dynamic-dns/DNSDynamic2025_2.png "A labeled architecture diagram titled 'How DDNS works' illustrates the process of updating and resolving a dynamic IP address using a dynamic DNS (DDNS) service. At the top, a horizontal arrow labeled 'Dynamic IP address changed' shows an address changing from '198.51.100.22' to '198.51.100.47'. In step 1, two desktop icons on either side send updated IP information to a central DDNS server icon, with a label that reads 'The host device sends its current IP address to the DDNS service'. In step 2, a user icon at the bottom left performs a lookup query to the DDNS server, labeled 'A user looks up the domain (e.g., example.ddns-provider.com) and the DDNS server returns the latest IP'. In step 3, the user icon connects to the host, now resolved to the updated IP, with the label 'The user connects to the domain, which now resolves to the updated IP address'. Blue arrows visually guide the sequence of these steps in a clockwise flow.")

Here's how the process works step by step:

1. You register a domain name with a DDNS provider and link it to your current IP address.
2. You install a DDNS client that monitors your IP address for changes.
3. When the IP address changes, the client notifies the DDNS provider.
4. The provider updates the DNS record so the domain always points to the correct IP.
5. This process runs continuously to keep the domain in sync.

In networks using NAT, port forwarding is often needed to make internal services reachable from the internet.

DDNS keeps the domain name remains accurate even when the public IP changes. And this allows consistent remote access without manual DNS updates.

It's easy to set up, but typically used in branch offices, labs, demo sites, small-scale business environments, or by technical users hosting services at home.

Basically, DDNS provides a lightweight, cost-effective way to expose services without buying static IPs or deploying a full DNS stack.

## What does DDNS help with?

![A labeled diagram titled 'DDNS architecture' illustrates the flow of network traffic involving a dynamic DNS setup. On the left, an icon labeled 'Internal server' connects to a 'NAT router' via a left-pointing arrow, with text underneath indicating 'Internal IP = IPin, Port = Portin'. The NAT router sits in the center and points right to an 'Internet' icon with text underneath reading 'External IP = IPex, External port = Portex'. From the Internet icon, an arrow points up to a 'Dynamic DNS server' icon and another arrow points down to an 'External client' icon. An additional arrow from the NAT router to the dynamic DNS server is labeled 'Updating the dynamic DNS server'. A final arrow points from the external client to the Internet, completing the network flow.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-dynamic-dns/DNSDynamic2025_1-DDNS.png "A labeled diagram titled 'DDNS architecture' illustrates the flow of network traffic involving a dynamic DNS setup. On the left, an icon labeled 'Internal server' connects to a 'NAT router' via a left-pointing arrow, with text underneath indicating 'Internal IP = IPin, Port = Portin'. The NAT router sits in the center and points right to an 'Internet' icon with text underneath reading 'External IP = IPex, External port = Portex'. From the Internet icon, an arrow points up to a 'Dynamic DNS server' icon and another arrow points down to an 'External client' icon. An additional arrow from the NAT router to the dynamic DNS server is labeled 'Updating the dynamic DNS server'. A final arrow points from the external client to the Internet, completing the network flow.")

DDNS is designed to solve one specific problem: keeping a domain name pointed to the right place when your IP address changes.

That makes it useful in a handful of specialized scenarios. Here are some common examples:

* **Remote access to a home network:** Accessing a file server, VPN, or remote desktop setup from outside your home.
* **Self-hosted services on a dynamic IP:** Running a website, FTP server, or gaming server from your home internet connection.
* **Surveillance and smart home monitoring:** Connecting to security cameras, DVRs, or smart devices that don't use a cloud service.
* **Test environments and sandbox servers:** Developers using dynamic cloud instances without load balancers or static IPs.

In all of these cases, the goal is the same: Avoid connection issues by keeping a domain name synced with a changing IP address.

DDNS is mostly used by hobbyists, home lab enthusiasts, and small businesses that want to host services without paying for a static IP.

## What are the benefits of DDNS?

There's really just one benefit of DDNS: staying reachable when your IP address changes.

That's the core purpose---and everything else stems from it.

DDNS lets you keep a domain name synced to a changing IP, which means services like home servers, remote desktops, or smart devices remain accessible without needing to manually update DNS records every time your IP shifts.

Other "benefits" are really just side effects of this one function:

* \*\*You don't have to pay for a static IP ---\*\*but that's only helpful if you're okay with the trade-offs that come with dynamic addressing. In most business environments, you'd pay for stability instead.
* **It requires less manual maintenance,** but that only applies if you're already managing your own DNS or hosting services at home. For most people, these aren't things they're doing in the first place.
* **It works for small-scale setups,** but DDNS is rarely used in modern enterprises or cloud-native architectures. If scale is your concern, there are better options.

DDNS is a practical tool for very specific situations. Again, usually hobbyist or budget-constrained business setups. But it's not a broadly applicable networking solution. Its simplicity is its strength, but also its limitation.

## What are the different types of DDNS implementations?

|   Type of DDNS   |                                          How it works                                           |                                  Good for                                   |
|------------------|-------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------|
| Client-based     | A lightweight app runs on a local device and updates the DNS record when the public IP changes. | Users hosting a server or camera from an always-on PC or NAS.               |
| Router-based     | The router detects IP changes and sends updates directly to the DDNS provider.                  | Anyone who wants a simple, always-running solution with no extra device.    |
| Custom/API-based | A script or tool calls the DNS provider's API to update records when the IP changes.            | Users comfortable with scripting or programmable DNS tools.                 |
| Enterprise-style | You sign up with a provider that offers plug-and-play tools (apps, router support, etc.).       | Non-technical users who want a quick setup for home or small office use.    |
| Turnkey services | Internal name resolution using DHCP and DNS servers---does not update public DNS.               | Enterprises managing internal hostnames---not for internet-facing services. |

There are a few different ways to use DDNS, depending on your setup and technical skill level.

Each method ultimately does the same thing---keep a domain name synced with your current IP---but the approach varies by device, tooling, and user preference.

### Client-based (software installed on a PC or NAS)

This setup uses a lightweight app installed on a local machine. It monitors your public IP address and updates the DDNS provider whenever it changes.

**Good for:** Users running a home server, NAS, or camera from an always-on computer.

### Router-based (DDNS built into your router)

![A labeled diagram titled 'Router-based DDNS deployment' illustrates the flow of network traffic involving a dynamic DNS setup.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-dynamic-dns/DNSDynamic2025_7.png "A labeled diagram titled 'Router-based DDNS deployment' illustrates the flow of network traffic involving a dynamic DNS setup. ")

Some routers include DDNS support directly. When the router detects a new IP from the ISP, it sends an update to your DDNS provider---no other device or app required.

**Good for:** Users who want a simple, always-on setup that doesn't depend on a specific computer.  
***Note:***  
*Many NAS systems, IP cameras, and DVRs work similarly---they have built-in DDNS support and update the provider directly using saved credentials.*

### Custom or API-based (scripts and automation tools)

![A diagram titled 'Custom or API-based DDNS deployment' shows a dynamic DNS setup using automation or scripts. On the left, a box labeled 'Data center web server mywebsite.com' contains a 'Dynamic DNS agent' icon connected to a router. Step 1 shows the router sending a 'DHCP request to ISP', and Step 2 shows a 'Dynamic IP assigned from pool'. The connection continues through a gray horizontal bar labeled 'Internet'. Step 3 indicates the DNS agent performs a 'DNS update to public DNS service'. On the far right, Step 4 shows the 'Cloud DNS server' with the label 'DNS record updated for www.mywebsite.com'. Blue numbered circles mark each step, and arrows indicate the direction of IP assignment and DNS updates.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-dynamic-dns/DNSDynamic2025_10.png "A diagram titled 'Custom or API-based DDNS deployment' shows a dynamic DNS setup using automation or scripts. On the left, a box labeled 'Data center web server mywebsite.com' contains a 'Dynamic DNS agent' icon connected to a router. Step 1 shows the router sending a 'DHCP request to ISP', and Step 2 shows a 'Dynamic IP assigned from pool'. The connection continues through a gray horizontal bar labeled 'Internet'. Step 3 indicates the DNS agent performs a 'DNS update to public DNS service'. On the far right, Step 4 shows the 'Cloud DNS server' with the label 'DNS record updated for www.mywebsite.com'. Blue numbered circles mark each step, and arrows indicate the direction of IP assignment and DNS updates.")

This method involves writing a custom script or using a third-party tool to update DNS records through an API. The script typically runs on a local machine or server and communicates directly with DNS providers that support dynamic updates. It's flexible, but requires some technical skill to set up.

**Good for:** Tech-savvy users who want control or already use programmable DNS services.

### Turnkey services (plug-and-play DDNS from a provider)

These are all-in-one solutions where the provider gives you everything you need---apps, router integrations, or setup guides---to keep your domain synced.

**Good for:** Users who want an easy, provider-managed option with minimal setup.  
***Note:***

* *The functionality is the same across all methods. The difference is how much of the setup is manual versus pre-packaged.*
* *Enterprise networks typically use internal DHCP and DNS servers to manage device names within the network. These systems may automatically update internal records, but they don't update public DNS. That's internal name resolution, not dynamic DNS.*

## What are the security risks of DDNS?

DDNS isn't inherently dangerous. But in business networks, its presence can be a red flag.

Because DDNS allows domains to point to changing IP addresses, attackers often use it to support malicious infrastructure that needs to stay flexible and hard to track.

[Malware](https://www.paloaltonetworks.com/cyberpedia/what-is-malware), for example, may use a DDNS-registered domain to communicate with a [command-and-control](https://www.paloaltonetworks.com/cyberpedia/what-is-malware) server. If defenders block the server's current IP, the attacker can simply update the DNS record with a new one---keeping the malware online.

Like this:  
![A horizontal network architecture diagram that begins with a laptop on the left labeled 'Laptop,' connected to a firewall icon with a flame symbol. A connection labeled 'malware.c2c.com' points from the laptop to the firewall, where a red X and the label 'China C2C IP blocked at firewall' indicate the traffic is denied. Two paths branch from this point. One path leads upward to a gray server labeled 'Malware C2C server 1 China IP.' The other path leads downward to another gray server labeled 'Malware C2C server 2 UK IP' and is marked 'Allowed to UK IP.' To the right of both servers is a gray rectangle labeled 'Dynamic DNS agent,' which connects to both servers and also points to a separate white server icon labeled 'Public DNS.' Above this server, text reads 'Public DNS updated to UK IP for malware.c2c.com.' The overall layout traces the change in DNS resolution from the blocked server to an alternate server allowed by the firewall.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-dynamic-dns/DNSDynamic2025_9.png "A horizontal network architecture diagram that begins with a laptop on the left labeled 'Laptop,' connected to a firewall icon with a flame symbol. A connection labeled 'malware.c2c.com' points from the laptop to the firewall, where a red X and the label 'China C2C IP blocked at firewall' indicate the traffic is denied. Two paths branch from this point. One path leads upward to a gray server labeled 'Malware C2C server 1 China IP.' The other path leads downward to another gray server labeled 'Malware C2C server 2 UK IP' and is marked 'Allowed to UK IP.' To the right of both servers is a gray rectangle labeled 'Dynamic DNS agent,' which connects to both servers and also points to a separate white server icon labeled 'Public DNS.' Above this server, text reads 'Public DNS updated to UK IP for malware.c2c.com.' The overall layout traces the change in DNS resolution from the blocked server to an alternate server allowed by the firewall.")

That's why DDNS is often flagged in threat intelligence tools. Because it shows up in phishing campaigns, payload delivery systems, and persistent malware callbacks.

So while not malicious on its own, DDNS is commonly abused in real attacks.

The bigger issue?

In enterprise environments, there are very few legitimate reasons to use DDNS.

Most organizations use static IPs, VPNs, or private overlays---so DDNS traffic tends to stand out. Security teams often treat outbound connections to DDNS domains as suspicious until proven otherwise.

Bottom line:

If DDNS shows up in network traffic, it doesn't always mean there's a problem. But it usually warrants investigation. That's less about the technology itself and more about how rarely it's used for legitimate purposes in business settings.  
| ***Further reading:** [What Are DNS Attacks?](https://www.paloaltonetworks.com/cyberpedia/what-is-a-dns-attack)*

## What is the difference between DNS and DDNS?

DNS and DDNS aren't different technologies---they use the same system.

DNS (Domain Name System) is the foundational service that maps domain names to IP addresses.

DDNS, or Dynamic DNS, is simply a way of automating DNS updates when an IP address changes. It doesn't replace DNS or work differently---it just removes the need for manual updates.

**Static DNS vs. DDNS**

|           Feature            |                            DNS                            |                          DDNS                          |
|------------------------------|-----------------------------------------------------------|--------------------------------------------------------|
| Definition                   | Manually maps domain names to IP addresses                | Automates updates to DNS records when IPs change       |
| IP address handling          | Assumes IPs stay the same                                 | Handles frequent IP address changes                    |
| Update mechanism             | Manual updates by admins or scripts                       | Automatic updates via client or router                 |
| Use case                     | Hosting websites, business infrastructure with static IPs | Home labs, remote access, dynamic or consumer networks |
| Reliability with dynamic IPs | Low --- breaks if IP changes and record isn't updated     | High --- auto-updates maintain access                  |
| Configuration requirement    | Basic DNS setup                                           | Requires DDNS client or router support                 |
| Provider dependency          | Can be self-hosted or use any DNS provider                | Depends on a specific DDNS provider                    |
| Network type suitability     | Stable, static environments                               | Dynamic, typically consumer-grade environments         |

More specifically:

**DNS, or Domain Name System, is the standard system used to translate domain names into IP addresses.** When someone enters a domain like example.com, DNS resolves that name to the correct IP address so the browser can reach the right server. This system is globally distributed and doesn't change unless a user or administrator updates the DNS record manually.  
![The image titled 'Hierarchical structure of the Domain Name System' visually represents the layers of the DNS hierarchy. At the top, a dotted box contains 13 illustrated servers labeled 'Root DNS servers' with the text '13 root servers' on the right side. Below this, a row of four teal ovals displays top-level domains labeled '.edu', '.org', '.com', and '.net'. A vertical line descends from the '.com' oval to a second-level domain labeled 'google' in another teal oval. From 'google', two lines branch downward to third-level domains labeled 'mail' and 'www', both in teal ovals. The levels are separated by horizontal lines and labeled on the right side as 'Top level domains', '2nd level domains', and '3rd level domains' respectively.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-dynamic-dns/DNSDynamic2025_5.png "The image titled 'Hierarchical structure of the Domain Name System' visually represents the layers of the DNS hierarchy. At the top, a dotted box contains 13 illustrated servers labeled 'Root DNS servers' with the text '13 root servers' on the right side. Below this, a row of four teal ovals displays top-level domains labeled '.edu', '.org', '.com', and '.net'. A vertical line descends from the '.com' oval to a second-level domain labeled 'google' in another teal oval. From 'google', two lines branch downward to third-level domains labeled 'mail' and 'www', both in teal ovals. The levels are separated by horizontal lines and labeled on the right side as 'Top level domains', '2nd level domains', and '3rd level domains' respectively.")

**DDNS, or Dynamic DNS, builds on this concept by automating updates to DNS records when an IP address changes.** This is especially useful in networks where public IP addresses are assigned dynamically by the internet service provider. With DDNS, the domain name remains accurate without requiring constant manual adjustments.

**Dynamic DNS (DDNS) doesn't change how DNS works---it just automates the part where someone would otherwise have to manually update a record.** That automation is helpful in setups where the public IP address can change without warning, like home networks or test environments that don't use static IPs.

[![A teal rectangular call-to-action banner features a white outlined icon of an open book inside a dotted circle on the left side. To the right of the icon, white text reads 'Learn more about DNS risks and how to regain control of your DNS traffic, featuring 'Stop Attackers from Using DNS Against You.'' Below the text, there is a white-outlined oval button labeled 'Download eBook'.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-dynamic-dns/FW-2024-CTAs_30.png)](https://www.paloaltonetworks.com/resources/whitepapers/stop-attackers-from-using-dns-against-you)

## Dynamic DNS FAQs

### What is Dynamic DNS used for?

Dynamic DNS is used to keep a domain name updated when a device's public IP address changes. It allows users to reliably access home networks, servers, or services hosted on dynamic IP connections without needing to update DNS records manually.

### Should my DNS be static or dynamic?

If your IP address changes frequently, dynamic DNS helps maintain connectivity without manual updates. Static DNS is more suitable when IP addresses do not change. The choice depends on your network type and whether consistent external access is required.

### Is there a free DynDNS?

Yes. Some DDNS providers offer free services. These may include basic features like a custom hostname and periodic IP updates, which are useful for personal or small-scale setups with dynamic IP addresses.

### Is DDNS good for gaming?

Yes. DDNS can be useful for hosting game servers at home. It provides a consistent domain name even when your IP address changes, so players can connect without needing to know the current IP.

### What are the risks of dynamic DNS?

Attackers can use DDNS to hide malicious infrastructure by frequently changing IP addresses behind a domain. This can help malware avoid detection. Like any network service, DDNS should be monitored when used in sensitive environments.

### Should I disable dynamic DNS?

Only if it's not needed. If DDNS isn't supporting any essential remote access or hosted services, disabling it may reduce exposure to unnecessary risk. Otherwise, it can be a helpful tool for dynamic networks.

### Should I enable DDNS on my router?

Enable DDNS on your router if you need consistent remote access to your home or small business network. It keeps your domain name synced with your changing IP, making access more reliable without manual updates.

### Is dynamic DNS a VPN?

No. Dynamic DNS is not a [VPN](https://www.paloaltonetworks.com/cyberpedia/what-is-a-vpn). It updates domain name records to reflect changing IP addresses. A VPN encrypts internet traffic and routes it through a secure tunnel. The two serve different purposes.

### What is the difference between DHCP and dynamic DNS?

DHCP assigns dynamic IP addresses to devices. DDNS updates DNS records when those IP addresses change. Together, they help networks remain reachable without manual configuration.

### Is DDNS wifi?

No. DDNS is not the same as Wi-Fi. DDNS is a network service that updates DNS records. Wi-Fi is a wireless method of connecting devices to a local network.
Related content  
[Threat Research: Subdomain Reputation: Detecting Malicious Subdomains of Public Apex Domains
Learn more about how attackers use DDNS and subdomains to hide malicious infrastructure.](https://unit42.paloaltonetworks.com/detecting-malicious-subdomains/)  
[Tech Docs: Dynamic DNS Overview
See the way PANW firewalls use DDNS to keep services reachable on dynamic IPs.](https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-networking-admin/ddns/dynamic-dns-overview)  
[White paper: Stop Attackers from Using DNS Against You
Find out how to regain control of your DNS traffic.](https://www.paloaltonetworks.com/resources/whitepapers/stop-attackers-from-using-dns-against-you?ts=markdown)  
[Blog: Strengthening Your DNS Protection with Advanced DNS Security
Discover the solution to squashing the threat of DNS hijacking with real-time AI-powered analysis.](https://www.paloaltonetworks.com/blog/network-security/precision-ai-advanced-dns/?ts=markdown)  
![Share page on facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/facebook-circular-icon.svg) ![Share page on linkedin](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/linkedin-circular-icon.svg) [![Share page by an email](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/email-circular-icon.svg)](mailto:?subject=What%20Is%20Dynamic%20DNS%20%28DDNS%29%3F&body=Dynamic%20DNS%20is%20a%20service%20that%20automatically%20updates%20a%20domain%20name%27s%20DNS%20record%20when%20its%20associated%20IP%20address%20changes.%20at%20https%3A//www.paloaltonetworks.com/cyberpedia/what-is-dynamic-dns)  
Back to Top  
{#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2025 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language