Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

NIOS RPZ feed recommendations to use after the feed revamp release in

...

January 2025.

This document provides NIOS RPZ feed recommendations, the release of new threat feeds in April 2024, and best practices for transitioning to the new threat feeds.

  • Infoblox offers a set of new RPZ feeds designed to replace the deprecated ones, including Infoblox Base, High Risk, Medium Risk, Low Risk, and Informational.

  • The old RPZ feeds will be deprecated in December 2024January 2025, while the new replacements will be released in April 2024.

  • Infoblox recommends switching to the new threat feeds in April 2024 for continued comprehensive threat protection.

  • Best practices involve removing to-be-deprecated feeds before their EOS date in December 2024 January 2025 and replacing them with recommended feeds from Infoblox. This overlapping period of time between the release of the new feeds and the deprecation of the old feeds should allow sufficient time to transition to the new threat feeds.

...

  • Remove all to-be-deprecated feeds from NIOS RPZ prior to their EOS date in December 2024January 2025. Replace the deprecated feeds with the recommendations as provided by Infoblox.  When the to-be-deprecated feeds reach EOS, NIOS will no longer be able to sync them from the Infoblox Portal, leading to an error state.

  • When replacing feeds with the recommendations below, consider policy settings, eg., logging vs blocking, of currently used feeds and replicate them for the replacements.

RPZ Feeds Scheduled for Deprecation in

...

January 2025

The following feeds are approaching end of service and are being deprecated. In their place, Infoblox offers a set of new RPZ feeds designed to replace the deprecated feeds. 

...

Feed Availability

Feed Name

Essentials

Business On-Prem

Advanced

Infoblox Base

Infoblox Base IP

NA

Infoblox High Risk

NA

NA

Infoblox Medium Risk

NA

NA

Infoblox Low Risk

NA

NA

Infoblox Informational

NA

For information for adding the new feeds and sizing requirements to your appliance, see Sizing Guidelines for Trinzic Appliances

...

Infoblox Threat Defense Advanced RPZ Feed Mapping

(old to new feeds)

Old Feeds

to

New Feeds

Suspicious 
Suspicious Lookalikes
Suspicious NOED

=>

Infoblox High Risk
Infoblox Medium Risk
Infoblox Low Risk

The Infoblox Threat Defense Advanced subscription contains all feeds included with Infoblox Essentials and Infoblox Business tier subscriptions in addtion to the feeds listed above.  Do note that for NIOS subscribers of a Infoblox Threat Defense Advanced subscription, attention must be placed on your appliance capacity when selecting your RPZ feeds.

Removal of NIOS RPZ Feeds to be Deprecated in

...

Removal of NIOS RPZ Feeds to be Deprecated in December 2024

January 2025

Note: The old feeds are being deprecated in December 2024January 2025; however, the new feeds that are intended to be their replacements are being released in April 2024.  

...