Version 9.0 introduced a dedicated DNS Security subscription to stop attacks using DNS for C2 (Command and Control) or data exfiltration. Policy Optimiser:
Since version 9.0.1 is an older release, ensure you take a snapshot of the Pa-vm-kvm-9.0.1.qcow2
Organizations migrating to SD-WAN often deploy the VM-Series as a SD-WAN hub or branch gateway. Version 9.0.1 supports BGP over IPSec tunnels, making it a stable testbed. Version 9