DNS (Domain Name System) is one of the most used threat vectors for enterprises today. Infoblox offers a purpose-built, secure platform to detect malware on clients, to isolate infected devices and to mitigate attacks. The comprehensive secure Infoblox platform based on hardened DDI (DHCP, DNS, IPAM) also analyses, secures and controls your network. Orange Cyber Defense implements Infoblox’s solutions to deal with those security threats.
Infoblox: fields of expertise
Infoblox appliances deliver core network services – including DNS, DHCP, IPAM, and NTP – in a trustworthy, secure, manageable and easy-to-deploy platform. The Infoblox Grid is created by linking appliances across a distributed enterprise and provides our customers with five 9’s of uptime.
DNS is an essential infrastructure component that has a unique place in the network. It is an ideal enforcement point for protection and reacts to threats like DNS attacks, APTs (Advanced Persistence Threats), malware, and data exfiltration. Advanced DNS Protection constantly monitors, detects, and drops many types of DNS attacks – including volumetric attacks such as floods and NXDOMAIN and non-volumetric attacks like exploits and anomalies – while responding to legitimate queries. It maintains DNS integrity, which can be compromised by DNS hijacking attacks.
On the other hand, BloxOne Threat Defense will protect your endpoints from reaching out to malicious domains and IP-addresses. Thus, protecting your clients from reaching compromised sites and applications. At the same time, it will scan all the queries for any data exfiltration that takes place over the DNS protocol. All of this can be either installed on-premise or as a cloud service.
Knowing what is on your network is the first step in securing your network. Infoblox can help you building your asset inventory. Scanning the network is will provide you with all the information you need from an endpoint. Who is logged in on the endpoint, where is it currently connected and where it was in the past.