Infoblox Ecosystem
for Security

Infoblox Ecosystem now with prebuilt certified integrations

Discover, learn, and deploy powerful networking and security integrations from the Ecosystem Portal. Whether you’re using SIEM, SOAR, XDR, firewalls, or other tools, Infoblox ensures seamless integration to bolster your network security and get better ROI from your security stack. Reduce device inventory collection time by 90%, and investigation time by 67% while unlocking the full potential of your network and security solutions with Infoblox.

Security information and event management (SIEM)

Infoblox sends correlated events from BloxOne Threat Defense and information on IP addresses, infected devices and suspicious DNS requests and responses to SIEM. SIEM can use this information to perform analysis and take action.

Benefits:

• Reduce alert fatigue by delivering correlated SOC Insights directly to your SIEM
• Provides consolidated visibility into device activity regardless of where log data was generated
• Enrich context for more accurate prioritization of security events
• Improves operational efficiency of SecOps and IT teams

Security orchestration, automation and response (SOAR)

SOAR solution receives information on IP addresses, network devices and malicious events and insights from Infoblox. SOAR uses that information to block/unblock/check domain and check information about the IP/host/network/domain in IPAM. Infoblox automatically enriches IPAM with data from security tools and events.

Benefits:

• Provides comprehensive device and user context for highlighting risk and enriching SOAR playbooks
• Automates and produces faster response with the full set of threat intelligence APIs
• Improves security processes by integrating with other systems via SOAR

Vulnerability management

Infoblox sends information on new network devices and malicious events to vulnerability management. Vulnerability management uses that information to automatically trigger scans, enabling complete assets discovery, faster remediation and better compliance.

Benefits:

• Provides near-real-time visibility into new devices as they join the network
• Automates and accelerates response to network changes and malicious events
• Facilitates selective scanning based on assets

Threat intelligence platform (TIP)

Infoblox Threat Intelligence Data Exchange (TIDE) automatically sends information on malicious hostnames, IP addresses and URLs to a threat intelligence platform. TIP enables blocking and monitoring of more threats.

Benefits:

• Fills gaps in protection, especially involving high-risk domains, Zero Day DNS, lookalike domains and more
• Ensures consistent policy enforcement across all control points
• Improves overall security posture

Network access control (NAC)

Infoblox provides information on IP addresses, network devices and DNS security events. NAC solutions can use that information to get context to better prioritize threats and take more immediate action (such as taking the device off the network) to shorten time to containment.

Benefits:

• Expands visibility into network infrastructure, users, and devices
• Provides vital context for threat prioritization
• Enables timely action, such as quarantining compromised devices

Next-generation firewall (NGFW)

Infoblox enhances security by blocking a majority of cyberthreats at the DNS level including high-risk domains, ransomware, phishing, DNS-based data exfiltration and more. These events, along with Infoblox Threat Intel, are shared with NGFWs. NGFWs utilize threat intelligence from Infoblox TIDE to block or monitor malicious hostnames, IP addresses, and URLs.

Benefits:

• Reduces the number of alerts security teams must review
• Improves situational awareness for network and security organizations
• Improves overall security posture

IT service management, IT operations management (ITSM, ITOM)

Infoblox automatically raises an IT ticket when new devices join the network or malicious events are detected, along with detailed device and user info. Infoblox also provides this information to IT communications tools. Network and security administrators gain a consolidated view of all the device and event information Infoblox discovers.

Benefits:

• Provides at-a-glance dashboard views into devices and endpoints joining and leaving the network
• Enables proactive identification of network issues to accelerate response to network changes and security events