BloxOne Threat Defense Feeds
Infoblox has introduced new feeds for on-prem (NIOS-based) implementations. However, these have not yet been made available for BloxOne Threat Defense Cloud on July 31st. For on-prem (NIOS-based), The the new feeds are available for on-prem (NIOS-based) implementations based on BloxOne Threat Defense subscription; BloxOne Threat Defense Essentials, BloxOne Threat Defense Business on-prem, and BloxOne Threat Defense Advanced.
...
The following feeds are available based on your subscription level.
Feed Availability | ||||
|---|---|---|---|---|
Feed Name | Essentials | Business On-Prem | Business Cloud | Advanced |
Infoblox Base | ✔ | ✔ | ✔ | ✔ |
Infoblox Base IP | NA | ✔ | ✔ | ✔ |
Infoblox High Risk | NA | NA | NA | ✔ |
Infoblox Medium Risk | NA | NA | NA | ✔ |
Infoblox Low Risk | NA | NA | NA | ✔ |
Infoblox Informational | NA | ✔ | ✔ | ✔ |
For information on the new RPZ feed recommendations for NIOS, see Feed Revamp for NIOS.
Infoblox will notify you when the new feeds become available to be used in configuring security policies in the Cloud Services Portal.
Threat Insight - Zero Day DNS Feed
The Threat Insight - Zero Day DNS feed has been released. Organizations desiring access to the Threat Onsight - Zero Day DNS feed must be subscribers of BloxOne Threat Defense. The Threat Insight - Zero Day DNS feed cannot be enabled (and thereby does not apply) to On-Prem NIOS. For information on the Zero Day DNS feed, see the Zero Day DNS Configuration documentation.