All Internet communications rely on DNS. However, it is often susceptible to attack, as DNS is often not sufficiently secured. Cybercriminals use DNS as a vector for data exfiltration and as a malware control point. Existing security controls, such as firewalls, email proxies, and web proxies, often do not focus on DNS and associated threats. Infoblox ActiveTrust Cloud addresses these issues by bringing together Infoblox’s leading DNS security capabilities like malware containment, DNS data exfiltration prevention, threat investigation and reporting into one service delivered from the cloud. ActiveTrust Cloud helps enable organisations to reduce IT overhead, lower upfront costs and quickly scale as the organisations expand or their needs change.
Infoblox ActiveTrust Cloud features include:
• Detect and block DNS-based data exfiltration using behavioural analytics. ?
• Disrupt malicious DNS-based communications to C&Cs and prevent malware from propagating. ?
• Stay on top of evolving malicious domains and IPs using real-time machine-readable threat intelligence curated for low false positives. ?
• Threat investigation tool for fast analysis using threat context to take action in minutes, not hours.
• Unified management, analytics, and reporting on the
premises and in the cloud. Customise policy based on business needs without DNS expertise. ?
• Deep visibility and rich network context around infections and compromised devices on or off the premises
“Today’s workforce is increasingly mobile and the number of employees working from remote locations is rising,” said Scott Fulton, executive vice president of products at Infoblox. “Remote and branch offices often don’t have the local IT resources to manage security infrastructure and end up compromising on their security posture. Infoblox offers protection for these remote users and branch office users with our easy to use SaaS service without the need to deploy infrastructure.”
Infoblox has been helping protect users on-premises for years, and is now the first and only major DDI vendor to provide organisations with an on-premise and a cloud service for securing users everywhere with unified policy management, data exfiltration prevention, analytics and reporting. In addition, using Infoblox Actionable Network Intelligence, customers can use valuable context to prioritise and remediate threats rapidly.
“Improving security and managing risk is paramount to our customers,” said Chris Zwergel, practice manager of application solutions at Groupware Technology. “Many of our customers have employees who are on the road or remote, and protecting their devices against cyberattacks while securing data is not only needed but necessary. We see great value in integrating security with DDI. As the DDI industry leader, Infoblox is well positioned to provide DNS-based protection for our clients wherever their users may be. We are pleased to see Infoblox offer both an on-premise solution and a cloud delivered SaaS model, so our customers get to choose their deployment method.”
