Heads-up if you're working on CVE-2024-3393:
PAN changed the advisory so that the required configuration for exposure is now:
Both of the following must be true for PAN-OS software to be affected:
- Either a DNS Security License or an Advanced DNS Security License must be applied.
- DNS Security logging must be enabled.
Instead of this:
DNS Security logging must be enabled for this issue to affect PAN-OS software.