Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Feed

Default Action

Precedence

Section

Default Allow

ALLOW - No Log

1

Default Section

Default Block

BLOCK - No Redirect

2

Infoblox Base

BLOCK - No Redirect

3

Block Section

Infoblox Base IP

BLOCK - No Redirect

4

Infoblox High Risk

BLOCK - No Redirect

5

Threat Insight - Zero Day DNS

BLOCK - No Redirect

6

Infoblox Medium Risk

BLOCK - No Redirect

7

Infoblox Low Risk

ALLOW - With Log

8

Allow Section

Infoblox Informational

ALLOW - With Log

9

Threat Insight - DGA

ALLOW - With Log

10

Threat Insight - Data Exfiltration

ALLOW - With Log

11

Threat Insight - FastFlux

ALLOW - With Log

12

Threat Insight - DNS Messanger

ALLOW - With Log

1312

Threat Insight - Notional Data Exfiltration

ALLOW - With Log

1413

Bogon

Not Included

Policy Rules: (user can add these with corresponding action - per their policy)

Cryptocurrency hostnames and domains

Not Included

TOR Exit Node IPs

Not Included

DHS_AIS_IP

Not Included

EECN IPs

Not Included

Spambot IPs DNSBL

Not Included

US OFAC Sanctions IPs

Not Included

Sanctions Med

Not Included

Sanctions High

Not Included

Farsight Newly Observed Domains (NOD)

Not Included

Proofpoint ETIQRisk Hostname

Not Included

Proofpoint ETIQRisk IP

Not Included

...

Feed

Default Action

Precedence

Default Allow

ALLOW - No Log

1

Default and Custom (if any) Section

Default Block

BLOCK - No Redirect

2

Custom List (if any manually configured)

BLOCK - No redirect

3

Infoblox Base

BLOCK - No Redirect

4

Block Section

Infoblox Base IP

BLOCK - No Redirect

5

Infoblox High Risk

BLOCK - No Redirect

6

Threat Insight - Zero Day DNS

BLOCK - No Redirect

7

Infoblox Medium Risk

BLOCK - No Redirect

8

Categorization filter (if any manually configured)

BLOCK - No redirect

9

Application filter (if any manually configured)

BLOCK - No redirect

10

Infoblox Low Risk

ALLOW - With Log

11

Allow Section

Infoblox Informational

ALLOW - With Log

12

Threat Insight - DGA

ALLOW - With Log

13

Threat Insight - Data Exfiltration

ALLOW - With Log

14

Threat Insight - FastFlux

ALLOW - With Log

15

Threat Insight - DNS Messanger

ALLOW - With Log

1615

Threat Insight - Notional Data Exfiltration

ALLOW - With Log

1716

Categorization filter (if any manually configured)

ALLOW - With Log

1817

Application filter (if any manually configured)

ALLOW - With Log

1918