In Case You Missed It
Last month’s product updates can be found in January’s communication.
Now Available
- Infoblox Portal: Infoblox Labs Feature Watch List
- Infoblox Universal DDI™: Microsoft and NIOS DHCP Improved Lease Visibility
- Infoblox Universal Asset Insights™
- ServiceNow CMDB Reconciliation
- Query Builder
- Versa Networks Discovery
- NIOS-X: DHCP Ping Before Offer
- Ecosystem: VMware Aria Automation Provider for Infoblox Universal DDI
Coming Soon
- Infoblox Universal Asset Insights: Expanded Discovery Coverage
- NIOS-X: Infoblox Trinzic X6 Appliance Support
- NIOS DDI: NIOS 9.1.0 Brings Expanded Automation, DNS Encryption, Outbound API and More—without Extra Licenses
- Ecosystem: Palo Alto Networks XSIAM (SIEM)
End-of-Life / End-of-Support Announcements
- RPZ Feed Revamp: Update Enforcement for Infoblox Threat Defense™
- RPZ Feed Revamp: Update for NIOS
Infoblox Threat Intel Research
- Inside the Pig Butchering as a Service Economy
- Kimwolf Howls from Inside the Enterprise
- Inside the Malicious Push Adtech Machine
INFOBLOX PORTAL
Infoblox Portal: Infoblox Labs Feature Watch List
Now Available
Feature Watch List within Infoblox Labs is your dedicated space to track upcoming features and express interest in features before they are available for activation. Capabilities include browsing upcoming features, adding features to your watchlist and receiving notifications when watched features become available for early access preview. For more information on the Feature Watch List and a step-by-step guide on expressing interest, visit the Infoblox Labs page.
NETWORKING
Infoblox Universal DDI™: Microsoft and NIOS DHCP Improved Lease Visibility
Now Available
Infoblox Universal DDI™ now supports discovery of DHCP leases from Microsoft and NIOS DHCP servers, providing clear, real-time visibility into both environments in the Infoblox Portal. This unified visibility enables faster troubleshooting and richer reporting across on-prem environments. Visit the following links for additional information on configuring the Microsoft DHCP integration and the NIOS Grid Connector.
Infoblox Universal Asset Insights™: ServiceNow CMDB Reconciliation
Now Available
Infoblox Universal Asset Insights™ now offers a fast, accurate way to measure and improve ServiceNow CMDB quality using Infoblox’s authoritative view of the network. It compares configuration management database (CMDB) records against live discovery data, clearly highlighting accurate entries and identifying gaps or stale records, so teams can take targeted, data‑driven action instead of relying on manual spot checks.
Assets are automatically categorized as:
- Present in both ServiceNow and Infoblox
- Listed in ServiceNow but not observed on the network
- Active on the network but missing from ServiceNow
A summary dashboard provides at-a-glance CMDB accuracy metrics, while detailed reports pinpoint specific assets that require updates. Reports can be exported or scheduled, ensuring continuous visibility into CMDB data quality. To try the new integration as part of a free Infoblox Universal Asset Insights trial, register here. For more information, visit the Ecosystem Portal.
Infoblox Universal Asset Insights: Query Builder
Now Available
Infoblox Universal Asset Insights now supports a structured, human-readable query language with rich operators, context-aware namespaces and cross-entity relationships for precise filtering. Query Builder also provides saved query filters, making it easy to reuse both basic and advanced asset inventory queries. Saved filters retain the full query context—including entity, conditions, and time range—and can be categorized, searched, cloned, and run directly from Universal Asset Insights, streamlining investigations and ensuring consistency across teams.
Infoblox Universal Asset Insights: Versa Networks Discovery
Now Available
Infoblox Universal Asset Insights adds a new discovery source for Versa Networks, enabling automated discovery of Versa-managed assets within the unified asset inventory. Using Versa Director APIs, Universal Asset Insights discovers Versa appliances, along with their logical and physical networks, subnets, interfaces, and IP address allocations across sites and routing instances. This integration provides centralized visibility into Versa assets, making it easier to identify stale or misconfigured resources and troubleshoot Versa-managed SD-WAN fabrics with confidence. To try the new integration as part of a free Infoblox Universal Asset Insights trial, register here. For more information, visit the Ecosystem Portal.
Infoblox Universal Asset Insights: Expanded Discovery Coverage
Coming Soon
Infoblox Universal Asset Insights will expand with new API-based discovery integrations, delivering pervasive visibility into IP-connected assets across on-premises and cloud environments. Upcoming discovery sources include:
- Verkada
- Oracle Cloud Infrastructure
- HPE Aruba Central
- HPE Aruba EdgeConnect
These integrations will enable automated discovery and help teams improve asset awareness, identify stale or misconfigured resources, and manage hybrid environments with confidence.
NIOS-X: DHCP Ping Before Offer
Now Available
DHCP Ping Before Offer for NIOS‑X is a resiliency feature that enables DHCP servers to verify whether an IP address is already in use before offering it to a client, reducing IP conflicts. Before sending a DHCP offer, the server checks that the candidate IP is not active on the network and automatically skips any addresses currently in use, preventing conflicts in environments with unmanaged or manually configured devices and improving overall network stability for end users.
NIOS-X: Infoblox Trinzic X6 Appliance Support
Coming Soon
Once available, you will be able to run NIOS‑X on higher‑capacity Trinzic X6 hardware, enabling the support of larger deployments, appliance consolidation, and alignment with modern data center space and power standards. By standardizing on X6, you can achieve up to 50 percent better DNS and DHCP performance compared to prior hardware generations while reducing your on‑prem footprint. It also strengthens branch and remote site resiliency, with local NIOS‑X servers on X6 that keep critical DNS and DHCP services running even during disruptions to core data center connectivity. To upgrade to X6, please open a support case and request to have your server upgraded from NIOS to NIOS-X.
NIOS DDI: NIOS 9.1.0 Brings Expanded Automation, DNS Encryption, Outbound API and More—without Extra Licenses
Coming Soon
In March 2026, Infoblox will introduce NIOS 9.1.0, bringing more built‑in value to the platform. NIOS 9.1.0 will include DNS encryption, DNSTAP high‑speed logging and outbound API integrations as part of the core product—capabilities that previously required separate add‑on licenses. The release will also expand automation support so teams can manage mission‑critical DNS, DHCP and IPAM services faster and easier.
Last quarter, we expanded NIOS automation by introducing the NIOS Swagger API and enhanced infrastructure-as-code (IaC) support. These additions simplify NIOS DDI integration into automation workflows and provide complete API coverage for Terraform IaC tools, so teams can confidently embed automated DDI operations into continuous integration (CI)/continuous delivery (CD) pipelines and hybrid cloud provisioning. NIOS 9.1.0 builds on that foundation by introducing automation‑friendly universally unique identifiers (UUIDs), API‑driven OAuth 2.0 authentication for Ping Identity, streamlined Azure provisioning, and more, helping teams execute DDI operations faster while reducing manual effort and risk.
NIOS 9.1.0 also strengthens security and resilience with new IPv6, DNSSEC and cloud high-availability enhancements that make it easier to respond to changing business and regulatory requirements. Together, these additions reinforce our commitment to continually expanding the capabilities, reliability, and agility of Infoblox’s flagship DDI solution, and to continuously delivering more value for your NIOS investment.
Quick Links for Universal DDI
Quick Links for NIOS DDI
Subscribe to the Infoblox Status Page to receive real-time notifications on maintenance upgrades.
ECOSYSTEM
Ecosystem: VMware Aria Automation Provider for Infoblox Universal DDI
Now Available
Infoblox has released an updated VMware Aria Automation Provider for Infoblox Universal DDI, delivering tighter, seamless integration with VMware Aria Automation. This update adds support for VMware Aria Automation Orchestrator, building on the earlier release of VMware Aria Automation Assembler. The integration automates IPAM and DNS operations across the full provisioning and deprovisioning lifecycle of virtual machines. This reduces manual effort and configuration errors while ensuring consistent delivery of critical network services across hybrid and multi‑cloud environments.
Ecosystem: Palo Alto Networks XSIAM (SIEM)
Coming Soon
Infoblox and Palo Alto Networks XSIAM are partnering to integrate DNS and IPAM activity into XSIAM, streamlining event logging and deepening network visibility. The integration will feed enriched IPAM metadata, DNS telemetry, threat intelligence and contextual insights into XSIAM for stronger correlation, hunting and investigation.
A deployment guide is in development to illustrate how to send syslog output from Infoblox via the Cloud Data Connector (CDC) into the Palo Alto Networks SIEM environment. Once available, it will be accessible from the Ecosystem Portal with clear, supported configuration steps. Additional information is available in the recently published solution note.
END-OF-LIFE / END-OF-SUPPORT
RPZ Feed Revamp: Update Enforcement for Infoblox Threat Defense™
Projected Date: April 30, 2026
The RPZ Feed Revamp for Infoblox Threat Defense™, originally introduced in July 2024, gives you a simplified feed structure, more threat indicators and intuitive feed names with built‑in risk levels so you can better align policy actions with risk tolerance. The new feeds are widely adopted and you can upgrade with a single click in the Policy screen. To reduce complexity and keep innovation focused on the new model, Infoblox will automatically migrate any remaining policies still using old feeds to the new feeds starting April 30, 2026. After which, the old feeds will be removed and fully deprecated. With an extended transition window of more than one and a half years, upgrading ahead of April 30, 2026 lets you manage this change on your own schedule. For more information, please refer to the Configuration Guide.
RPZ Feed Revamp: Update for NIOS
Projected Date: April 30, 2026
The RPZ Feed Revamp for NIOS, originally introduced in May 2024, gives you a simplified RPZ structure, more threat indicators and intuitive response policy zone (RPZ) names with built‑in risk levels so you can better align policy actions with risk tolerance. The new RPZs are widely adopted. To focus on innovation and reduce the complexity of supporting legacy RPZs, Infoblox will stop updating the old RPZs with new indicators starting April 30, 2026, and those RPZs will eventually carry no indicators. To maintain effective protection, Infoblox strongly recommends updating your NIOS RPZ configurations by removing the old RPZs and replacing them with the new ones. Read more in the Configuration Guide.
INFOBLOX THREAT INTELLIGENCE
New Research Available
Infoblox Threat Intel is the leading creator of original DNS threat intelligence, uniquely able to interpret DNS at scale and discover what others can’t. We use deep visibility into the internet’s inner workings to predict, uncover and disrupt threat actors before they strike.
Visit Infoblox Threat Intel to get direct access to content and stay up to date on the latest threat research.
Inside the Pig Butchering as a Service Economy: Pig butchering scams have become an industrialized economy, lowering entry bars for new criminal groups to scale quickly. In this research blog, Infoblox Threat Intel maps the underground supply chain and shows why an effective defense means shifting focus from individual scams to the shared criminal services, financial enablers and malicious infrastructures that make mass fraud possible.
Kimwolf Howls from Inside the Enterprise: Kimwolf operators abuse residential proxy services and DNS signaling to turn consumer devices on business networks into vantage points inside the enterprise. Using Infoblox DNS telemetry, Threat Intel saw related DNS activity in nearly 25 percent of Infoblox Threat Defense Cloud environments. This research underscores why DNS visibility and protective DNS controls are critical to exposing and mitigating this hidden internal attack surface.
Inside the Malicious Push Adtech Machine: Infoblox researchers, acting as “observers on the side,” analyzed 57 million DNS logs to uncover a large-scale malicious push-notification network that delivers scams, malware and other unwanted content to unsuspecting users. The blog details how this network operates, who it reaches and how it is embedded in the broader Adtech ecosystem, showing why DNS-level visibility is essential to seeing and disrupting it.
