Palo Alto Networks - DNS Proxy

DNS Proxy (configured by navigating to Network -> DNS Proxy) is a feature that can be very useful for environments where you do not have dedicated DNS servers, as it allows you to proxy all DNS requests through the firewall, as well as create static entries for forward and reverse lookups.

For example, if you use GlobalProtect in an Always-On configuration, you will need a way for the app to determine when it is on the internal network so that it does not build a VPN tunnel. The static entry below is an example:

See my first GlobalProtect post for additional details regarding internal host detection.