Abstract

Cyberthieves are constantly developing new methods to breach corporate networks, deploying various tactics that infiltrate typical cyberdefenses and create a “backdoor” in order to steal confidential data or deploy malicious tools such as ransomware.

Because DNS originated as a relatively simple translation tool, it was considered benign, with DNS traffic typically allowed to pass through security solutions without additional inspection. Unfortunately, cyberattackers have developed new techniques to exploit DNS and use it to steal sensitive data from corporate networks as well as to infiltrate malware into the network.

Infoblox commissioned Tolly to evaluate the effectiveness of the Infoblox BloxOne® Threat Defense solution in key DNS-layer threat scenarios and compare those results against the Palo Alto NGFW v10.22 solution. The Infoblox Threat Defense solution demonstrated greater effectiveness than Palo Alto NGFW, as will be detailed shortly, and provided greater visibility than the Palo Alto NGFW offering.