Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Threat Insight for a cloud destination accessed through Data Connector is valid for local RPZ zones only. When you configure RPZs for a grid, you can define rules to block DNS resolution for malicious domains or to redirect cloud clients. Infoblox allows you to configure only one cloud client per grid, and you must first request an API key through the Cloud Services the Infoblox Portal, to authorize Threat Insight requests from the cloud client.

You must configure the Infoblox Data Connector to transport data from the grid to BloxOne to Infoblox Threat Defense CloudPlatform, and you can use this feature only when an RPZ license is installed on the grid. When you configure Threat Insight for a cloud destination, the Threat Insight domains added in the Cloud Services the Infoblox Portal for a user are synchronized with the RPZ zone that you add to the list. This synchronization takes place according to the interval you define.

If your grid is running NIOS version 8.2.0, you can configure the grid to retrieve blocklisted domains (which are detected by Threat Insight) from the cloud destination and to block traffic by using RPZs. For more information about RPZs, refer to the Infoblox NIOS Administrator Guide.

...