Bahrain, Saudi Arabia
InfobloxRun and protect the network services every connection depends on
Infoblox manages DNS, DHCP and IP address management (DDI) from one point of control, and its Threat Defense product blocks malicious domains at the DNS layer. It runs on premises, in public clouds and as a service.
- DDI in one place
- DNS, DHCP and IP address management (IPAM) through one console and API
- Protective DNS
- Threat Defense blocks malicious domains when devices look them up, with no endpoint agent required
- Hybrid deployment
- Physical or virtual appliances, AWS, Azure, Google Cloud, Oracle, or NIOS-X as a Service
- Built for uptime
- HA pairs, DNS anycast and DHCP failover avoid a single point of failure
Problems Infoblox is designed to solve
DNS (which turns names into addresses), DHCP (which hands out IP addresses) and IPAM (the record of which address is used where) sit underneath every application. When they are fragmented or unprotected, these are the usual results.
| Topic | What it can lead to | How Infoblox helps |
|---|---|---|
| IP addresses tracked in spreadsheets | What it can lead to: Address conflicts, outages and slow provisioning, because nobody is sure which addresses are free. | How Infoblox helps: Policy-based IPAM defines address policies centrally and enforces them automatically, using live DNS and DHCP data. |
| DNS spread across Microsoft, cloud and external providers | What it can lead to: Inconsistent records, changes that are hard to audit, and forgotten "dangling" records that attackers can take over. | How Infoblox helps: Universal DDI manages public and private zones in Amazon Route 53, Azure DNS, Google Cloud DNS, Windows Server DNS, Cloudflare and Akamai from one portal, and flags dangling records. |
| DNS or DHCP as a single point of failure | What it can lead to: A failed server can take a whole site offline, even when the network itself is healthy. | How Infoblox helps: NIOS supports HA pairs, DNS anycast and DHCP failover, and links appliances into one managed Grid. |
| Malware using DNS to call home or move data | What it can lead to: Command-and-control traffic and DNS tunnelling that firewalls and endpoint tools may not inspect. | How Infoblox helps: Threat Defense acts as the resolver, checks every query against threat intelligence and behavioural models, and detects DNS tunnelling and algorithm-generated domains. |
| Devices and cloud assets missing from inventory | What it can lead to: Blind spots in the configuration management database (CMDB) and in security coverage. | How Infoblox helps: Universal Asset Insights continuously discovers assets across hybrid and multi-cloud networks, anchored in DNS and DHCP data. |
| Lookalike domains imitating your brand | What it can lead to: Phishing sites and emails that your staff and customers mistake for yours. | How Infoblox helps: Threat Defense protects against common lookalike domains, can monitor domains you submit, and Infoblox offers takedown services. |
What Infoblox does
Infoblox splits into two families: DDI, which keeps names and addresses accurate and available, and DNS security, which uses the same DNS traffic to stop threats.
DNS, DHCP and IPAM
Manage DNS zones, DHCP scopes and the IP address plan in one place, so records and allocations stay consistent across sites and clouds.
Protective DNS (Threat Defense)
Blocks lookups of malicious domains before a connection is made, covering on-premises, remote, IoT and OT devices and cloud workloads without agents.
Asset discovery
Universal Asset Insights builds an inventory from DNS and DHCP data and finds unmanaged or forgotten infrastructure, including cloud assets.
Grid and high availability
NIOS Grid links appliances into one system; HA pairs, anycast and DHCP failover keep services running if a member fails.
Encrypted DNS and response policy zones
NIOS supports DNS over HTTPS (DoH) and DNS over TLS (DoT), and response policy zones (RPZ) that block malicious domains using feeds you choose.
Automation and APIs
Built-in Terraform and Ansible integrations and OpenAPI specifications, so DNS and IP changes can be part of your provisioning pipeline.
Infoblox products and where each fits
Most organisations start with DDI, DNS security or both. This table shows which product covers what.
| Topic | What it covers | How it is deployed |
|---|---|---|
| NIOS DDI | What it covers: DNS, DHCP and IPAM in one interface, with Grid management, DNS Traffic Control load balancing and identity mapping of IP and MAC addresses to users and devices. | How it is deployed: Physical or virtual appliances on premises, or on AWS, Azure, Google Cloud and Oracle. Pay-as-you-go licensing is available in the AWS and Azure marketplaces. |
| Universal DDI | What it covers: One SaaS portal and API across NIOS, NIOS-X, cloud DNS services and external DNS providers, with administrative domains for least-privilege access. | How it is deployed: Managed from the Infoblox Portal (SaaS), with NIOS-X virtual or physical servers, or NIOS-X as a Service. |
| Threat Defense | What it covers: Protective DNS: blocking of malicious domains, DNS tunnelling detection, and lookalike domain protection. | How it is deployed: Cloud service; local DNS Forwarding Proxies can run on NIOS-X servers or NIOS Grid members to forward queries and keep device-level visibility. |
| Universal Asset Insights | What it covers: Continuous discovery of assets across hybrid and multi-cloud networks, for IP conflict resolution and CMDB accuracy. | How it is deployed: Part of the Universal DDI suite; confirm licensing with us. |
Infoblox product names and packaging change over time. Confirm the current editions and licences with us before you plan a purchase.
Before you change your DNS, DHCP and IPAM
Nine questions worth answering whatever product you use. Tick what is already true: nothing you select is saved or sent.
How VirtuThinko helps you adopt Infoblox
- 01
Requirements
We can help you define what you need Infoblox to solve, which environments are in scope and how success will be judged.
- 02
Demo or proof of concept
We can arrange a demonstration or a proof of concept, for example running Threat Defense against a sample of your DNS traffic or importing your IP plan into IPAM.
- 03
Design and deployment
We can help design the Grid or Universal DDI layout, plan migration from Microsoft or other DNS and DHCP servers with rollback, and deploy appliances or NIOS-X servers.
- 04
Tuning and handover
We can help tune security policies and allow lists, set up reporting and integrations, and hand over documentation and admin knowledge to your team.
- 05
Ongoing support
Where you want it, we can support Infoblox after go-live, including health checks, upgrades and changes as your environment grows.
DDI stands for DNS, DHCP and IP address management. DNS turns names into IP addresses, DHCP assigns addresses to devices, and IPAM keeps the record of which address is used where. Infoblox manages all three together so they stay consistent.
Infoblox says Universal DDI can manage Windows Server DNS, Amazon Route 53, Microsoft Azure DNS, Google Cloud DNS, and external DNS services such as Cloudflare and Akamai from one portal. Infoblox also has an IPAM for Microsoft product. We can confirm which of your services are supported during scoping.
No. Infoblox describes Threat Defense as agentless because it works at the DNS resolver, which sees every lookup. Local DNS Forwarding Proxies on NIOS-X servers or NIOS Grid members can keep visibility of the original device. Infoblox also documents an endpoint client for devices that leave the corporate network.
Yes. Infoblox lists NIOS on AWS, Azure, Google Cloud and Oracle Cloud, as well as on-premises physical or virtual appliances, with pay-as-you-go licensing in the AWS and Azure marketplaces.
Infoblox strongly recommends configuring DNS fallback on DNS Forwarding Proxies, so queries are still resolved locally if the platform is unreachable. This should be part of any deployment design.
Explore Infoblox for your organisation
Share how your DNS, DHCP and IP addressing are run today, the sites and clouds involved, and whether your priority is management, security or both. A member of our team will contact you to arrange an initial conversation.