BloxOne Threat Defense Cloud introduces a new workflow that streamlines the DNS forwarding proxy deployment process. You no longer need to pre-provision hosts through the Cloud Services Portal, nor do you need to copy API keys to establish host connection when configuring DNS forwarding proxies on bare-metal containers or virtual machines.
Virtual Appliances
Before you configure a virtual machine as a DNS forwarding proxy, you must first create a join token and use it to authenticate the host, so BloxOne Threat Defense Cloud can establish a connection to the host. For information about join tokens and how to manage them, see /wiki/spaces/InfrastructureDRAFT/pages/82150299. Once you set up the virtual appliance using a valid join token, a connection to BloxOne Threat Defense Cloud is established, and the host status changes to Active (if the host and all the services running on it are functioning properly). The host is now a fully manageable device, and you can manage it through the Cloud Services Portal.
The following diagram illustrates the provisioning process for DNS forwarding proxies deployed on virtual machines:
...
You can view all connected and disconnected proxies on the Manage > Infrastructure > Hosts page of Cloud Services Portal, which allows you to manage all your devices. The portal gives you a collective view of all of your devices in the network, including the device's current status.
...
This topic includes new features and enhancements for BloxOne DDI. You can view information about other enhancements and maintenance for BloxOne products and services in the BloxOne Release Notes.
BloxOne DDI – May 2, 2023
BloxOne delivers the following Dashboard enhancements: interactive legends, enhanced tooltips, chart selection options, and top threat classes filter and zoom flexibility.
- Test Chandru - DDI ignore
Interactive Legends: You can easily filter data elements in the legend and dynamically update charts to display the data most critical to you.
Enhanced Tooltips: Smooth scrolling and intuitive display of the data points across the X & Y axis as you hover through dashboard charts and data series.
Chart Selection Options: - Toggle between bar and area chart options to select the ideal display for your selected data set.
Top Threat Classes Filter and Zoom Flexibility: You can easily zoom in to explore and focus on smaller segments of the treemap for the Communication Threat Class and Remote Targets widget–updated with the ability to select and highlight individual segments.
For information, see Viewing the Dashboard.
BloxOne DDI – April 21, 2023
Three new dashboard widgets, DHCP Messages, DHCP Leases, and Total DNS Queries, are now available on the Cloud Service Portal.
BloxOne offers three new dashboard widgets in BloxOne DDI to show DHCP messages (ACKs sent and INFORMs received), DHCP leases (Total Reclaimed, Total Declined, and Total Assigned), and Total DNS Queries on a single host or a subset of deployed hosts. In addition to the existing widgets, these new widgets help with capacity planning and snapshotting the environments. For information, see Viewing the Dashboard.
Inline DNS Query/Response Tester is now available on the Cloud Services Portal.
BloxOne DDI allows you to run DNS queries (using the dig command) on a host running DNS service from within the Cloud Services Portal. This will help you troubleshoot DNS-related issues. You must upgrade to the latest version of the host software to use this feature. For more information on upgrading the host, see Scheduling Software Updates for Hosts. For more information about this feature, see Running a DNS Query.
You can disable DHCP protocol in subnets, ranges, and fixed addresses for the DHCP protocol.
This is particularly helpful during pre-deployment provisioning and troubleshooting activities. For information, see Configuring Subnets, Configuring Address Ranges, and Configuring Fixed Addresses.