...
In NIOS Grid Manager, navigate to Data Management > DNS > Response Policy Zones.
Identify the current NIOS feeds for removal. These can be identified by their Names: infoblox-base.rpz.infoblox.local, infoblox-base-ip.rpz.infoblox.local, infoblox-high-risk.rpz.infoblox.local, infoblox-medium-risk.rpz.infoblox.local, infoblox-low-risk.rpz.infoblox.local, and infoblox-informational.rpz.infoblox.local.
Note: The availabilty of the new RPZ feeds is dependent on subscription level.
Note: If you have a large number of RPZs, use the search function to locate the feeds to be removed.
Image: Searching for specific RPZs to be removed.
Select the checkbox associated with one of the feeds to be removed.
Click the ( trash can icon ) or the Delete button in the toolbar.
Image: Removing the old RPZ feeds from NIOS.
Click Yes in the Delete Confirmation dialogue. Image: Confirming the removal of the selected feeds. The removed feeds will be moved to the Recycle Bin.
If you are removing multiple feeds, repeat steps 3-5 for each.
Deletion of RPZs requires a service restart. Click Restart located in the top, yellow banner to perform a system restart.
Image: Click Restart to remove the desired feeds and restart NIOS.
In the Restart Grid
In the Restart Grid Services dialog, adjust Restart Method if desired and click Restart.
Image: Selecting a restart method from among the restart options.
...
Adding the New NIOS RPZ Feeds to be Released on April 2024
Feed and Distribution Server Configuration Values
To get the configuration information for the new, replacement NIOS RPZ feeds, you need to find out the feed names and the configuration details for the distribution server.
In the Cloud Services Portal, navigate to Policies > On-Prem DNS Firewall.Image: Navigating to On-Prem DNS Firewall within the Cloud Services Portal.
Click on Feed Configuration Values.
Image: Click Feed Configuration Values (Step 2) of the feed configuration process.
In the
In the Threat Feed Details list, locate the first feed you will configure. Refer to the table in the Replacement Feed Mapping section for recommended feeds.
Click the Copy button for the desired Note: Paste this and other configuration data copied in this section into a text file for easy retrieval when configuring the feeds in NIOS.
Image: The Threat Feed Details list from the Cloud Services Portal.
Repeat steps 3 and 4 for each Refer to the table in the Replacement Feed Mapping section for recommended feeds.
Click Close.
Click on Distribution Server Configuration Values.
Image: Click Distribution Server Configuration Values (Step 3).
Scroll down to locate the Distribution Server you will use and click the Copy button for the IPv4 or IPv6 Note: Paste this and other configuration data copied in this section into a text file for easy retrieval when configuring the feeds in NIOS.Image: The Distribution Server Details panel displaying the IPv4, IPv4(Notify), and IPv6 information.
Scroll down to the TSIG
Note the Key Algorithm that is configured.
Copy the Key Note: Paste this and other configuration data copied in this section into a text file for easy retrieval when configuring the feeds in NIOS.
Copy the TSIG. Note: Paste this and other configuration data copied in this section into a text file for easy retrieval when configuring the feeds in NIOS.
Click Cancel to exit the Distribution Server.
Image: The Distribution Server details panel configuratio details.
...
Adding RPZ Feeds in NIOS
...
In NIOS Grid Manager, navigate to Data Management > DNS > Response Policy Zones.
Click the ( add icon ) or the Add button in the toolbar.
Image: The new NIOS RPZ feeds added in order of recommended order (slots 0 through 5). Note: Feed availability is dependent on subscription level.
On Step 1 of the Add Response Policy Zone Wizard, select Add Response Policy Zone Feed.
Click Next.
Image: The first step of adding a response policy zone feed. .
Click Next.
On Step 2, paste the Name of the feed, as copied from the Cloud Services Portal.
Optionally, adjust Policy Override and Severity. Note: This should reflect the policy used on the SURBL feeds being replaced.
Click Next.
Image: The second step of adding a response policy zone feed includes providing a name for the feed and optionally adjusting the policy override and severity.
On Step 3, use the Add button dropdown to select External Primary. Note: To save time, you can instead use a nameserver group configured with the external primary and any Grid secondaries to be used for all RPZs. Refer to NIOS Documentation for additional information on creating nameserver groups.Image: The third step of adding a response policy zone feed involves selecting the External Primary. .
Enter a Name. Note: This field is for reference purpose only, use any name you choose.
Enter the Address of the distribution server as copied from the Cloud Services Portal.
Select the box for Use TSIG.
Enter the Key Name as copied from the Cloud Services Portal.
Select the Key Algorithm as noted from the Cloud Services Portal.
Enter the Key Data as copied from the Cloud Services Portal.
Click Add.Image: Adding configuration information in the TSIG text fields.
Use the Add button followed by selecting Grid Secondary from among the menu option choices.Image: Adding a Grid Secondary.
Click Select followed by choosing the NIOS member to update. Note: You can configure a single secondary to be “Lead Secondary”. If you select this, then that member will be the only one to reach out to the external primary. The feed is then redistributed between members using zone transfers.
Click Add.
Image: Selecting the NIOS member to update.
(Optional) Repeat Steps 17 and 18 to add additional NIOS appliances as secondaries.
Click Save & Close.
Image: Adding secondary nameservers.
Repeat steps 2-20 for each feed you are adding.
When adding an RPZ a service restart is In the banner at the top of the Grid Manager window, click on Restart.Image: Click Restart to remove the desired feeds and restart NIOS. Restart.
In the Restart Grid Services dialog, adjust Restart Method if desired and click Restart.
Image: Selecting a restart method from among the restart options to restart the Grid Service.
(Optional) Once you have added all feeds, use the Order Response Policy Zones button in the Toolbar to change the order feeds are applied. Image: Clicking the Order Response Policy Zones button to change the feed order.
In the Order Response Policy Zones dialog, use the arrows to change the
Click OK when complete.
Image: Configuring Order Response Zones for the new NIOS RPZ feeds.
Changing the order of RPZs requires a service restart to take effect. In the banner at the top of the Grid Manager window, click on Restart.
In the Restart Grid Services dialog, adjust Restart Method if desired and click Restart.
...