Supported Threat Protection Appliances and Licensing Requirements

The Infoblox Advanced DNS Protection solution offers the following licenses: Threat Protection, Threat Protection (Software add-on), and Threat Protection Update. The following are descriptions for each of these licenses:

• Threat Protection: Install this license on the physical or hardware-based threat protection appliances. With valid licenses installed, Infoblox Advanced DNS Protection supports both IPv4 and IPv6.
  You can configure two appliances of the same model to form an HA pair for high availability configuration. For more information about how to configure an HA pair for Infoblox Advanced DNS Protection and its limitations, see About HA Pairs. You can configure hardware-based appliances in either IPv4, IPv6, or dual mode (IPv4 and IPv6) network environment.

Note: Reverting to an earlier NIOS release that does not support HA configuration for these appliances could cause a service outage.

• Threat Protection (Software add-on): The Software ADP license is a subscription license. Grid Manager displays a warning message when the license expires. You must renew the license to use the Software ADP service. To renew the license, contact your Infoblox representative or Infoblox Technical Support. Before you obtain your permanent license, you can install a temporary license for Threat Protection (Software add-on) using the set temp_license CLI command. For more information, refer to the Infoblox CLI Guide. Infoblox supports Threat Protection (Software add-on) and Threat Protection Update licenses for elastic scaling. For more information, see About Elastic Scaling.

Note: You cannot install Multi-Grid Management and Microsoft Management licenses if you install Threat Protection or Threat Protection (Software add-on) licenses on the NIOS appliance.

• Threat Protection Update: To receive initial and subsequent threat protection rules and rule updates, you must have the Threat Protection Update license installed. You can then configure NIOS to automatically download and publish threat protection rules or you can manually complete the process. For information, see Manually Uploading Rulesets and Publishing Rule Updates.

With valid licenses installed, the threat protection appliance can be used as a DNS caching or DNS authoritative server. You can join the appliance to the Grid and treat it as a Grid member. Note that if you install a Threat Protection license on a member, you can enable threat protection only on this member. Contact your Infoblox representative to obtain the Threat Protection, Threat Protection Update and Threat Protection (Software add-on) licenses. For information about licenses, see Managing Licenses.
The following table lists all the supported threat protection appliance models and licenses that you can install on them to activate threat protection:
Table 41.1 Threat Protection Appliance Models and Appliances

You can install the Threat Protection (Software add-on) license on the following hypervisors:

• VMware ESXi with or without SR-IOV enabled
• OpenStack with KVM with or without SR-IOV enabled
• KVM with or without SR-IOV enabled

For more information about these appliances, refer to the respective installation guides under the Tech Docs tab on the Infoblox Support site at https://support.infoblox.com.