SANTA CLARA, USA: Infoblox Inc. has introduced The Infoblox DNS Firewall - FireEye Adapter, bringing together the power of the Infoblox DNS Firewall and the malware protection system from FireEye Inc. to help organizations protect themselves against Advanced Persistent Threats (APTs).
Today, enterprise networks are under increasing attack by APTs, which leverage stealth and work over a long period of time - in many cases days, weeks or months - without the target ever being aware of their presence. Because APTs are typically custom-designed and narrowly targeted, traditional signature-based detection methods rarely if ever find them.
The Infoblox DNS Firewall for FireEye solution unites two powerful technologies to defend against APTs.
The FireEye NX Series uses a unique automated approach to test suspicious executable files in a safe virtual environment, where the files are activated, the behavior is observed and any malicious activity is identified. The Infoblox DNS Firewall uses a threat information subscription service to stay constantly updated on malware other than APTs, leveraging the Domain Name System (DNS) to block communication to known malicious destinations.
DNS acts as the phone book to every destination on the Internet. When identified malware on an infected device - such as a laptop, smart phone or tablet - attempts to "call home," the Infoblox DNS Firewall can block the connection by denying the DNS communication request. This leaves malware that relies on DNS with no way of reaching its host for further instructions or to transmit information stolen from the target.
The Infoblox integration can take details on detected APTs from FireEye and feed that data into the Infoblox DNS Firewall. This combination of products enables customers to automatically detect APTs, disconnect malware from its host and also pinpoint infected devices quickly - reducing response time and speeding up remediation efforts.
Current FireEye users can arrange a free 60-day trial of the Infoblox DNS Firewall for FireEye solution through an Infoblox sales representative or channel partner.