View a markdown version of this page

Rule states for Palo Alto Networks rules - Amazon Route 53

Rule states for Palo Alto Networks rules

PANW rules in DNS Firewall can have different sync states that indicate their status.

Rule sync states
Sync state Description Recommended action
CREATED The rule has been successfully created and is being enforced normally. No action needed.
CREATING The rule is currently being created, pending an entitlement check. If you are subscribed to the PANW product, the rule eventually transitions to CREATED. No action needed.
CREATION_FAILED The rule failed to create because you are not subscribed to the PANW product. To retry rule creation after subscribing, you must delete the rule from the rule group and create the rule again.

To check rule status in the console, navigate to the DNS Firewall rule group and check the Status column in the rules table.