The world of networking and security may now be divided into two groups: Those who know their networks are infected with malware, and those who don’t acknowledge their networks are compromised. Indeed, a recent research project by Cisco Systems found that 100 percent of the networks they evaluated—every single one—had suspicious traffic going to web sites that host malware.
Malware is rapidly evolving, with new generations of advanced persistent threats (APTs) that have been designed by cybercriminals to be almost invisible. Yet almost all APTs use the Doman Name System (DNS) —the ubiquitous address book of the Internet—to “call home” for instructions from their command and control servers, for downloading additional malware payloads, and for stealing data. DNS is an ideal choke-point for detecting malware communications that slip past other security solutions, because almost all network communication protocols use DNS as a mechanism to connect with their destination domains.
Infoblox provides commercial-grade DNS appliances for many of the world’s largest enterprise and service provider networks, meeting the needs of demanding customers who insist on DNS that is automated, reliable, and secure.
The Infoblox DNS Firewall Virtual Evaluation can receive updates of new and emerging malicious domains every two hours to help networks stay current on identified malware sources in the evolving threat landscape. The evaluation product can use the updated information to detect and report on suspicious activity within a network.
After the 60-day evaluation period, customers can opt to purchase the full version of the Infoblox DNS Firewall (https://www.infoblox.com/products/secure-dns/dns-firewall) which, in addition to detecting malware, can also block malware communications and provide information about infected end-points making malicious queries.
“DNS is too valuable to be vulnerable,” said David Gee, executive vice president of marketing at Infoblox. “It’s easy for security vendors to spread doom and gloom, but it’s often hard for them to prove their point. We’re confident the Infoblox DNS Firewall Virtual Evaluation will find malware on most enterprise networks—with minimal effort by network administrators—at no cost and with no obligation.”