...
To protect internet-facing IP address spaces your company uses, you can register these networks using the External Networks feature through the Cloud Services Portal. You identify these networks by IP addresses. A network can contain a group of IPv4 addresses or blocks. If you have multiple internet-facing networks, Infoblox recommends that you register all of them to ensure that they are protected when traffic is pointed at them. This also prevents IP spaces belonging to your company from being incorrectly assigned. Please be aware that no protection is provided for traffic pointed to a network that has not been registered.
The following diagram describes the high-level steps for deploying BloxOne Threat Defense for your company’s public networks:
For information on how to add your company's public networks for protection, see Configuring External Networks.
...
For information on how to deploy BloxOne Mobile Endpoint, see Managing BlloxOne Mobile Endpoint Management.
To view the BloxOne Endpoint deployment guides, click here for BloxOne Endpoint and here for BloxOne Mobile Endpoint.
On-Premises Networks
For on-premises networks , (including the NIOS Grid, ) in your enterprise infrastructure, BloxOne Threat Defense provides DFP (DNS Forwarding Proxy) as a DNS forwarder that forwards DNS queries to the BloxOne anycast DNS server or to a local DNS server that you configure. secures your DNS traffic. The DFP protects your DNS traffic when queries are sent over the internet to the BloxOne anycast DNS server. DFP runs You can run DFP as a service on hosts that you implement to connect to BloxOne Cloud, within which you can take full advantage of the security features to protect your enterprise infrastructure. If for any reason the host cannot reach the BloxOne anycast DNS server, DFP will send requests to a local DNS server that protects your clients via the RPZ (on-prem DNS Firewall) feeds.
...