NIOS RPZ feed recommendations to use after the feed revamp release in January 2025.
| Note |
|---|
Though the old to new feeds are shown for parity reasons, you need to configure per your appliance sizing. If you need the feed, but your appliance cannot handle that volume, please work with sales to upgrade the appliance. |
This document provides NIOS RPZ feed recommendations, the release of new threat feeds in April 2024, and best practices This document provides NIOS RPZ feed recommendations, the release of new threat feeds in April 2024, and best practices for transitioning to the new threat feeds.
...
This guide aims to facilitate the transition from the soon-to-be deprecated Infoblox Threat Defense feeds approaching end of service to their updated versions which are to be integrated into NIOS Response Policy Zones (RPZ). Infoblox recommends that NIOS users currently relying on the soon-to-be-deprecated feeds switch to the new feeds as they become available in April 2024 to ensure continued comprehensive threat protection.
Best Practices
| Note |
|---|
...
Though the old to new feeds are shown for parity reasons, you need to configure per your appliance sizing. If you need the feed, but your appliance cannot handle that volume, please work with sales to upgrade the appliance. |
Infoblox recommends the following as best practices for customers currently using the feeds to be deprecated.
...
Deprecated Combination RPZ Feed | Deprecated Combination RPZ Feed Name |
|---|---|
Extreme Block | ib-extreme-block.rpz.infoblox.local |
Extreme Log | ib-extreme-log.rpz.infoblox.local |
High Block | ib-high-block.rpz.infoblox.local |
High Log | ib-high-log.rpz.infoblox.local |
Med Block | ib-med-block.rpz.infoblox.local |
Med Log | ib-med-log.rpz.infoblox.local |
Low Block | ib-low-block.rpz.infoblox.local |
Low Log | ib-low-log.rpz.infoblox.local |
...
New NIOS RPZ Feeds Availability (April 2024)
The following NIOS RPZ feeds are available based on your subscription level.
| Note |
|---|
Though the old to new feeds are shown for parity reasons, you need to configure per your appliance sizing. If you need the feed, but your appliance cannot handle that volume, please work with sales to upgrade the appliance. |
New NIOS RPZ Feeds Availability (April 2024)
The following NIOS RPZ feeds are available based on your subscription level.
Feed Availability | |||
|---|---|---|---|
Feed Name | Essentials | Business On-Prem | Advanced |
Infoblox Base | ✔ | ✔ | ✔ |
Infoblox Base IP | NA | ✔ | ✔ |
Infoblox High Risk | NA | NA | ✔ |
Infoblox Medium Risk | NA | NA | ✔ |
Infoblox Low Risk | NA | NA | ✔ |
Infoblox Informational | NA | ✔ | ✔ |
For information for adding the new feeds and sizing requirements to your appliance, see Sizing Guidelines for Trinzic Appliances.
...
The following are the recommended NIOS feed replacements based on subscription level. For Infoblox Threat Defense Advanced, special attention must be placed on your appliance capacity when selecting replacement feeds.
Infoblox Threat Defense Essentials
...
Infoblox Threat Defense Essentials RPZ Feed Mapping
(old to new feeds)
...
Old Feeds
| Note |
|---|
Though the old to new feeds are shown for parity reasons, you need to configure per your appliance sizing. If you need the feed, but your appliance cannot handle that volume, please work with sales to upgrade the appliance. |
Infoblox Threat Defense Essentials
Infoblox Threat Defense Essentials RPZ Feed Mapping(old to new feeds) | ||
|---|---|---|
Old Feeds | to | New Feed |
Base Hostnames | => | Infoblox Base |
...
Infoblox Business On-Prem and Business Cloud subscriptions contain all feeds included with the Infoblox Essentials subscription plus the following RPZ feeds:contain all feeds included with the Infoblox Essentials subscription plus the following RPZ feeds:
| Note |
|---|
Though the old to new feeds are shown for parity reasons, you need to configure per your appliance sizing. If you need the feed, but your appliance cannot handle that volume, please work with sales to upgrade the appliance. |
Infoblox Threat Defense Business On-Prem and Business Cloud RPZ Feed Mapping(old to new feeds) | ||
|---|---|---|
Old Feeds | to | New Feeds |
Infoblox Antimalware IP | => | Infoblox Base IP |
Newly Observed Emergent Domains (NOED) | => | Infoblox Informational |
Infoblox Business On-Prem contains all feeds included with Infoblox Essentials subscription in addition to the feeds listed above. | ||
Infoblox Threat Defense Advanced
...
| Note |
|---|
Though the old to new feeds are shown for parity reasons, you need to configure per your appliance sizing. If you need the feed, but your appliance cannot handle that volume, please work with sales to upgrade the appliance. |
For NIOS customers possessing a Infoblox Threat Defense Advanced subscription, attention must be placed on your appliance capacity when selecting your RPZ feeds.
...