Infoblox Threat Defense (Private Offer Only)

I can describe some of the use cases for the product in general. I'm working with the Infoblox BloxOne Threat Defense  for the government, but I'm not sure if I can provide much information about that because it's secret-related.

What is valuable about the Infoblox BloxOne Threat Defense  is especially the monitoring and reporting, which provides valuable information. The integration with any SIEM  is very valuable for getting DNS query analytics, and this is very important.

The threat analytics tools in the Infoblox BloxOne Threat Defense improve security response through integration with another platform, allowing you to gain insights on your own data happening within your own Infoblox BloxOne.

Many things can be improved with the Infoblox BloxOne Threat Defense. I don't have specific improvements in mind, but there are many tools that can be enhanced.

I can give you an example: having too many restrictions in a platform is not a good thing for the developers.

I have had 4 years of experience with the Infoblox BloxOne Threat Defense.

I would rate their customer service or technical support as not always good. You can be fortunate if you meet someone knowledgeable because most people try and get you to a certain point. It depends on your level of technical expertise. From my perspective, I would say it's not good. From my experience, it seems to vary, and it's less relevant from an objective perspective.

Positive

The main differences between BlueCat and Infoblox BloxOne depend on your licensing, and there are various aspects to consider.

I think the pricing for the Infoblox BloxOne Threat Defense is very expensive. I believe the competitor, BlueCat, offers better prices.

I know that the Infoblox BloxOne Threat Defense supposedly has AI integrated according to suppliers, but personally, I don't use any AI tool to work with it. That being said, it's a black box, and it's not a Linux machine that you can add features to at will.

Overall, I would rate the Infoblox BloxOne Threat Defense as 8.5 out of 10.

I primarily use Infoblox BloxOne Threat Defense  in the banking sector and oil and gas industries.

The most useful aspect of Infoblox BloxOne Threat Defense  is its user-friendly interface and its powerful analytic reporting. The product has been implemented in the banking sector.

If Infoblox invests in network observability, especially from the perspective of DNS and IP address observability, it could be a significant improvement.

I have experience with this product for eight months.

I have faced quite a few problems in my eight months of experience with the product in GTS, despite it being a relatively short period.

Infoblox BloxOne Threat Defense can be expensive for the commercial sector, particularly in Egypt, as this sector does not have a huge budget compared to banking or oil and gas, as the regulations are not as strict.

My overall rating for Infoblox BloxOne Threat Defense is eight out of ten.

We use Infoblox BloxOne Threat Defense  for protecting against DNS tunneling, malware detection, DGA, and other threats. All our requests in the direction to the internet go through Infoblox BloxOne Threat Defense .

The most valuable features include malware detection, phishing, DNS tunneling detection, DGA, and DNS firewall feeds. Our network's DNS security posture has improved because of these features. It is important for us because the tool helps us handle security issues effectively.

The UI performance could be better in the future, as sometimes there are delays. Additionally, DNS resolution speed could be improved to match that of Google DNS or Cloudflare DNS .

We have used the solution for more than a year.

We did not face any challenges during the initial setup. The setup is quite easy, and the implementation took about two to three months. We simulated all traffic and spent time tuning rules before full deployment.

The stability of Infoblox BloxOne Threat Defense is near perfect at a rating of ten. Stability is critical for us because each DNS call is crucial for our services, and any issues with Infoblox BloxOne Threat Defense would impact our services.

Infoblox has to manage scalability, so we can't do much about it. However, it is quite scalable, with a rating of eight or nine.

Customer service is rated as an eight. They responded quickly and effectively when we experienced some over-blockings recently.

Positive

We previously used solutions from Spamhaus and others. We switched to increase our security maturity, as many attacks are related to DNS, and we needed to detect such issues.

The initial setup was rated an eight, indicating it was mostly easy with no significant challenges.

Two people were involved in the deployment process.

Infoblox BloxOne Threat Defense is quite expensive, especially due to the significant increase in the subscription fee after the first year. This unexpected increase was a problem for us.

We evaluated other vendors, but Infoblox BloxOne Threat Defense was chosen. Specifics on other evaluations were outside my scope.

I rate Infoblox BloxOne Threat Defense as an eight overall. While the tool offers valuable features and stability, the unexpected subscription price increases remain a concern.

Public Cloud

Other

What do you like best about the product?

"BloxOne Threat Defense is great for spotting and reacting to cyber threats instantly, so you stay protected without slowing things down.
It works well with your existing tools and uses the latest threat info to keep your network safe." It's easy to use.
Customer support is top-notch and I used to use frequently.

What do you dislike about the product?

One thing to watch out for with BloxOne Threat Defense is that it can be a bit complex to set up and might be more expensive than some other options. It might take a bit of work to get everything just right.

What problems is the product solving and how is that benefiting you?

BloxOne Threat Defense keeps your network safe by catching cyber threats before they become serious issues. It works well with your current security setup, making it easier to protect your systems without a lot of extra effort.

We use the solution for DNS security.

The solution provides insights into what’s happening on the network. It enriches the information internally.

The most valuable feature is policy redirecting and security reports. It detects threats and blocks them. Also, it offers DNS handling and data extraction. It provides a centralized view of connected users and incoming data sources. It is integrated via the API to different monitoring systems that send out alerts. We haven't had any false positives due to this solution.

The product could be cheaper.

I have been using Infoblox BloxOne Threat Defense as a consultant. We are using the latest version of the solution.

The product is very stable.

I rate the solution’s stability a ten out of ten.

We have no issues with the scalability. 10-15 users are using this solution. It is suitable for medium and enterprise users.

I rate the solution’s scalability a ten out of ten.

Technical support is very good.

Positive

Cisco Umbrella is more flexible and a very good competitor.

The initial setup is very straightforward. It is a SaaS solution designed for cloud security. The on-premises part is easily implemented. It facilitates a complete migration for comprehensive use cases. It takes about a month to get everything migrated, with fine-tuning and thorough testing.

Deployment involves planning, testing scenarios, defining acceptance policies, and then gradually migrating small network parts to utilize them effectively.

I rate the initial setup a nine out of ten, where one is difficult and ten is easy.

The product is expensive depending on all features.

I rate the product’s pricing an eight out of ten, where one is cheap, and ten is expensive.

I recommend the solution for extra insights and protection.

Overall, I rate the solution a nine out of ten.

Hybrid Cloud

Amazon Web Services (AWS)