Supported Threat Protection Appliances and Licensing Requirements

The Infoblox Advanced DNS Protection solution offers the following licenses: Threat Protection, Threat Protection (Software add-on), and Threat Protection Update. The following are descriptions for each of these licenses:

• Threat Protection: Install this license on the physical or hardware-based threat protection appliances. With valid licenses installed, Infoblox Advanced DNS Protection supports both IPv4 and IPv6.

You can configure two appliances of the same model to form an HA pair for high availability configuration. For more information about how to configure an HA pair for Infoblox Advanced DNS Protection and its limitations, see About HA Pairs . You can configure hardware-based appliances in either IPv4, IPv6, or dual mode (IPv4 and IPv6) network environment.

Note: Reverting to an earlier NIOS release that does not support HA configuration for these appliances could cause a service outage.








NIOS 8.1NIOS Administrator Guide (Rev. A) 1649
Infoblox Advanced DNS Protection

• Threat Protection (Software add-on): The Software ADP license is a subscription license. Grid Manager displays a warning message when the license expires, but you can continue using the Software ADP service. You can install a temporary license for Threat Protection (Software add-on) using the set temp_license CLI command. For more information, refer to the Infoblox CLI Guide. Infoblox supports Threat Protection (Software add-on) and Threat Protection Update licenses for elastic scaling. For more information, see About Elastic Scaling on page 500.

Note: You cannot install Multi-Grid Management and Microsoft Management licenses if you install Threat Protection or Threat Protection (Software add-on) licenses on the NIOS appliance.

• Threat Protection Update: To receive initial and subsequent threat protection rules and rule updates, you must have the Threat Protection Update license installed. You can then configure NIOS to automatically download and publish threat protection rules or you can manually complete the process. For information, see Manually Uploading Rulesets and Publishing Rule Updates 0.

With valid licenses installed, the threat protection appliance can be used as a DNS caching or DNS authoritative server. You can join the appliance to the Grid and treat it as a Grid member. Note that if you install a Threat Protection license on a member, you can enable threat protection only on this member. Contact your Infoblox representative to obtain the Threat Protection, Threat Protection Update and Threat Protection (Software add-on) licenses. For information about licenses, see Managing Licenses .
The following table lists all the supported threat protection appliance models and licenses that you can install on them to activate threat protection:
Table 43.1 Threat Protection Appliance Models and Appliances

1650NIOS Administrator Guide (Rev. A)NIOS 8.1
About Infoblox Advanced DNS Protection

Threat Protection Appliance ModelPhysical or VirtualRequired LicenseComments
TE-815 Physical Threat Protection (Software add-on) and Threat
Trinzic appliances
TE-825 Physical
TE-1410 Physical
TE-1415 Physical
Protection Update

TE-V815 Virtual NIOS virtual appliances TE-V825 Virtual
TE-V1410 Virtual

TE-V1415 Virtual

TE-V4015 Virtual
IB-FLEX Virtual Threat Protection (Software add-on) and Threat Protection Update
IB-FLEX


You can install the Threat Protection (Software add-on) license on the following hypervisors:

• VMware ESXi with or without SR-IOV enabled
• OpenStack with KVM with or without SR-IOV enabled
• KVM with or without SR-IOV enabled

For more information about these appliances, refer to the respective installation guides under the Tech Docs tab on the Infoblox Support site at https://support.infoblox.com.