Infoblox Advanced DNS Protection
Infoblox is the global DNS security leader with their products providing hardened services that protect organisations from threats to internal and external DNS service availability. Infoblox’s solutions provide an integrated, centrally managed approach to delivering enterprise-grade Domain Name Services (DNS), Dynamic Host Configuration Protocol (DHCP) and IP address management (IPAM).
Internal DNS Protection
Digital certificates are core to implementing a true multi-layered, identity-based security environment. Authenticate identities, verify devices, secure applications and email, and even safeguard websites.
Entrust provides organisations centralised services to automate certificate management. These services — available in various deployment models — help streamline the management of digital identities, SSL certificates, device certificates, mobile devices and more.
External DNS Protection
External DNS Security provides defence against the widest range of DNS-based cyber-attacks such as DNS Distributed Denial of Service (DDoS), NXDOMAIN, and DNS hijacking attacks and exploits. Unlike traditional approaches that rely on infrastructure over-provisioning or response-rate limiting, External DNS Security intelligently detects and mitigates DNS attacks while responding only to legitimate queries.
Infoblox Threat Adapt™ technology is used to automatically update its defence against new and evolving threats as they emerge. This also dispenses with the need for patching.
Infoblox leverages our market-leading DNS technologies into the industry’s first true DNS-based network security solution. Infoblox DNS Firewall prevents advanced persistent threats (APTs) and malware from stealing an organisation’s data by disrupting the ability of infected devices to communicate with botnets and controllers. A DNS Firewall works by employing DNS response policy zones (RPZs), near real-time threat intelligence and optional Infoblox DNS Threat Analytics to prevent data theft.
Infoblox seamlessly integrates DNS Firewall with leading third-party security solutions to enable contextual sharing of threat intelligence and automation of response workflows. This provides better protection against evolving threats. Infoblox provides comprehensive support for REST API and Structured Threat Integration Expression (STIX) and simplifies integration with third-party products.
DNS Threat Analytics
Theft of sensitive data is one of the most serious risks to an enterprise, and DNS is frequently used as a pathway for data theft because it is not inspected by common security products. According to a recent security report more than 9 out of 10 malware infections use the Domain Name Service to gain command and control, steal data and redirect traffic.
Infoblox DNS Threat Analytics detects and automatically blocks attempts to steal sensitive data via DNS. Available as an optional module with Infoblox DNS Firewall or Infoblox Internal DNS Security, DNS Threat Analytics provides protection against sophisticated data exfiltration techniques and off-the-shelf tunnelling toolkits.