This topic includes upcoming features and enhancements for BloxOne Threat Defense In September 2024.
DNS Tunnel Detection Improvements (Release Target: September 2024)
DNS Tunnel detection architecture on Infoblox Threat Defense Cloud and Advanced is now optimized to detect tunnels significantly faster (up to 10 times faster). The detection logic has now moved to the edge, at the local POP, and the data pipeline is further optimized to reduce enforcement time. Beyond behavioral detection, signature-based detection has been added with custom signatures for many well-known tunnels to detect them instantaneously. All these improvements allow Infoblox Threat Defense to protect customers from DNS Tunnels faster and more effectively.
Enhanced DFP Deployment (Release Target: Mid-September 2024)
To further enhance the performance and stability of crucial BloxOne Threat Defense services, a new second-level domain (infobloxtd.com) will be released along with additional IP addresses (103.80.6.120 and 52.119.41.120) in mid-September. To quickly and easily improve the resiliency of key Infoblox DNS Detection and Response capabilities, Threat Defense customers are encouraged to update their network configuration to enable access to the new IP addresses, the second-level domain, and all its subdomains as soon as possible.
Related Pages
Please note that future functionality and releases described in this communication are subject to change.