In Case You Missed It
Last month’s product updates can be found in February’s communication.
Now Available
- Infoblox Universal Asset Insights™: Additional Discovery Sources - HPE Aruba Central, Verkada and More
- NIOS DDI: NIOS 9.1.0 Brings Expanded Automation, DNS Encryption, Outbound API and More—without Extra Licenses
- Ecosystem: Palo Alto Networks Cortex XSIAM (SIEM)
Coming Soon
- Infoblox Portal: Scheduled Maintenance - Friday, March 13 at 2:00 a.m. UTC
- Infoblox Universal Asset Insights
- Enhanced Asset Details Experience
- Expanded Discovery Coverage
- Infoblox Universal DDI Management
- DNS Zone Server Configuration UI Update
- DNS Alias Records (NIOS, Cloudflare, Akamai)
- View Secondary Zones for Microsoft DNS Servers
- DHCP Split Ranges
- Sync Host Objects
- NIOS-X as a Service: Auto-Sizing for Token Consumption
- NIOS-X: Infoblox Trinzic X6 Appliance Support
- Infoblox Managed Rules for AWS Network Firewall
End-of-Life/End-of-Support Announcements
- RPZ Feed Revamp: Update Enforcement for Infoblox Threat Defense
- RPZ Feed Revamp: Update for NIOS
Infoblox Threat Intelligence
- Compromised Routers, DNS and a TDS Hidden in Aeza Networks
- Banners, Bots and Butchers: An Automated Long Con Targeting Japan, Asia and Beyond
INFOBLOX PORTAL
Infoblox Portal: Scheduled Maintenance - Friday, March 13 at 2:00 a.m. UTC
Coming Soon
Infoblox will perform a planned infrastructure upgrade to the Infoblox Portal (North America Realm: https://portal.infoblox.com) on March 13th between 6:00 p.m. PST (2:00 a.m. UTC on March 14) and March 14th 4:00 a.m. PST (12:00 p.m. UTC). This update supports improvements to security, availability and scalability.
During the maintenance window:
- DNS and DHCP protocol services will remain available and uninterrupted
- Configuration changes via the Portal UI and API will be temporarily unavailable for up to 20 minutes
- NIOS-X hosts may briefly display an “Unhealthy” status
- CDC traffic flow status in the Portal may temporarily appear unhealthy
- User synchronization and system notifications may experience brief delays
- Scheduled reports may be delayed
No action is required at this time. However, we recommend avoiding any configuration changes during the maintenance window. Thank you for your patience as we complete this upgrade. If you have any questions, please contact Infoblox Support.
NETWORKING
Infoblox Universal Asset Insights™: Additional Discovery Sources - HPE Aruba Central, Verkada and More
Now Available
Infoblox Universal Asset Insights™ now supports new discovery sources for HPE Aruba Central, HPE Aruba EdgeConnect, and Verkada, while also discovering Meraki MV smart cameras through the Cisco Meraki integration. These additions extend unified asset visibility across distributed environments.
Using cloud and controller APIs, Universal Asset Insights continuously discovers and ingests:
- HPE Aruba Central-Managed Network Devices: Delivering insight into cloud-managed switches, access points and related infrastructure across campus and branch locations
- HPE Aruba EdgeConnect SD-WAN Infrastructure: Enabling discovery of appliances, interfaces, subnets and associated IP allocations across sites
- Verkada-Managed Enterprise IoT Devices: Providing discovery and device identification across physical security and network domains
- Meraki MV Smart Cameras: Supporting visibility into surveillance and network-connected assets across campus, branch and distributed environments
All discovered assets are correlated with DNS, DHCP and IPAM data to create a single, authoritative inventory across network, cloud and physical domains. This unified perspective improves asset and IPAM accuracy, strengthens cross-system correlation and helps teams quickly identify unmanaged, stale or misconfigured assets.
To try the new integration as part of a free Infoblox Universal Asset Insights trial, register here. For more information, visit the Infoblox Ecosystem Portal.
Infoblox Universal Asset Insights: Enhanced Asset Details Experience
Coming Soon
Universal Asset Insights will introduce an enhanced user experience that will make it easier to understand, compare and trust data across providers. The improvements will provide deeper transparency, improved usability and richer cross-provider visibility.
The updated interface will include:
- Comprehensive Asset Details Panel: A more intuitive view with organized tabs (Overview, Network, User, Security, Provider Comparison, Lifecycle and History) enable teams to quickly navigate and analyze asset intelligence
- Network Interfaces View: Interface-level visibility for network devices, such as switches and routers, provides deeper operational context for troubleshooting and analysis
- Provider Comparison and Raw Attributes: Side-by-side comparison of asset data from multiple discovery providers, along with access to the full set of raw, unnormalized attributes collected by each source. Provider-specific metadata can be searched, copied and exported to improve transparency and confidence in multi-provider asset correlation
Together, these enhancements will reinforce Universal Asset Insights as a trusted, authoritative system of record, empowering teams with the visibility, context, and confidence needed to manage their asset data effectively.
Infoblox Universal Asset Insights: Expanded Discovery Coverage
Coming Soon
Universal Asset Insights will expand API-based discovery to provide deeper visibility into IP-connected assets, including enterprise IoT devices, across on-premises and hybrid cloud environments. Upcoming integrations include:
- Fortinet FortiCloud
- Jamf Pro
- Microsoft Defender
- Microsoft Intune
- Oracle Cloud Infrastructure
| - Palo Alto Prisma
- Tenable
- VMware ESXi/vCenter
- Zoom
- Zebra
|
|---|
These additional integrations further strengthen Universal Asset Insights as an authoritative source of truth for asset discovery, helping teams surface stale or misconfigured assets and manage complex hybrid environments with confidence. To learn more about these upcoming integrations and how they apply to your environment, review the additional Universal Asset Insights documentation.
Infoblox Universal DDI Management: DNS Zone Server Configuration UI Update
Coming Soon
The DNS zone server configuration experience is being redesigned to provide a more intuitive, NIOS-aligned user interface (UI) for assigning DNS servers to zones. The updated UI will enable flexible mixing of server types within a single zone, providing greater architectural and operational flexibility across environments. A clearer visual mapping of which zones are served by which DNS servers will improve visibility, shorten the learning curve for operations teams and reduce the risk of misconfiguration. This added flexibility is especially valuable in hybrid environments, where coordinated DNS service delivery across on-premises and multiple cloud platforms is critical to maintaining resilience and operational consistency.
Infoblox Universal DDI Management: DNS Alias Records (NIOS, Cloudflare, Akamai)
Coming Soon
Centralized management of DNS alias records for NIOS, Cloudflare and Akamai will soon be available through the Infoblox Portal. Managing alias records from a single, consistent UI reduces configuration drift, minimizes manual errors and eliminates the need to navigate between multiple provider consoles. This enhancement builds upon Universal DDI’s external DNS management capabilities, providing a unified control plane for internal and external DNS across your hybrid, multi-cloud estate. To learn more, see the Universal DDI Management data sheet.
Infoblox Universal DDI Management: View Secondary Zones for Microsoft DNS Servers
Coming Soon
The Infoblox Portal will soon provide clear visibility into the contents of secondary zones serving Microsoft DNS servers. With full zone data available in one place, it becomes easier to identify and remediate incorrect or unexpected responses before they impact users. This enhancement will also streamline the planning and execution of migrations from Microsoft DNS by enabling centralized review of records and settings prior to cutover. Extending secondary-zone visibility from NIOS-X and NIOS-XaaS into Microsoft environments helps you manage hybrid DNS with more confidence. If you’re running Microsoft DNS today, contact your Infoblox account team or partner to review how this capability can support your hybrid DNS strategy and migration plans.
Infoblox Universal DDI Management: DHCP Split Ranges
Coming Soon
Support for DHCP Split Range mode will soon be added, providing a simple, widely used high-availability model commonly used by other vendors, including Microsoft. Split ranges simplify migration of existing DHCP deployments without requiring redesign of the HA strategy, allowing environments to continue operating as they do today. This familiar approach is straightforward to run, backward compatible and provides an additional option alongside our more advanced HA modes. If you currently use split scopes or plan to migrate from another DHCP platform, contact your Infoblox account team or partner to review design options and migration guidance for Split Range mode.
Infoblox Universal DDI Management: Sync Host Objects
Coming Soon
Full management of NIOS host records synchronized into Universal DDI through the NIOS Grid Connector (NGC) will soon be available. Synced host records can be viewed and edited directly from the Infoblox Portal, alongside native Universal DDI data. This simplifies day‑to‑day operations for organizations adding Universal DDI to an existing NIOS grid and provides a smoother transition path for gradual migration of services to Universal DDI. If you are running NIOS with NGC today, reach out to your Infoblox account team or Infoblox Support to discuss enabling host object sync and recommended best practices for mixed NIOS/Universal DDI environments.
NIOS-X as a Service: Auto-Sizing for Token Consumption
Coming Soon
NIOS-X as a Service auto-sizing for token consumption will automatically adjust server token allocation based on actual usage, dynamically right-sizing NIOS-XaaS instead of requiring manual tier changes. This helps maximize capacity and performance while avoiding overprovisioning, ensuring that resources are efficiently used without paying for idle capacity needed only for peak loads. It will also reduce the manual effort of token and license management, lowering administrative overhead and making it easier to keep server sizing aligned with changing demand.
NIOS-X: Infoblox Trinzic X6 Appliance Support
Coming Soon
NIOS-X will soon support deployment on the higher‑capacity Trinzic X6 hardware, enabling larger deployments, appliance consolidation, and alignment with modern data center space and power standards. By standardizing on X6, you can achieve up to 50 percent better DNS and DHCP performance compared to prior hardware generations while reducing your on‑premises footprint. Local NIOS‑X servers on X6 also strengthen branch and remote site resiliency by maintaining critical DNS and DHCP services even if connectivity to the core data center is disrupted. To explore converting an existing NIOS server to NIOS-X, please contact Infoblox Support.
NIOS DDI: NIOS 9.1.0 Brings Expanded Automation, DNS Encryption, Outbound API and More—without Extra Licenses
Now Available
NIOS 9.1.0 is now available, bringing more built‑in value to the platform than ever before. NIOS 9.1.0 adds support for DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) encryption to meet evolving security and compliance requirements. The release also adds DNSTAP high‑speed logging for deep DNS visibility with streaming-based telemetry and simplified security integrations via the outbound event API. All of these new capabilities, which previously required separate add‑on licenses, are now included in the core NIOS product at no additional licensing charge.
NIOS 9.1.0 also expands automation support so teams can manage mission‑critical DNS, DHCP and IPAM services more quickly and easily. Last quarter, we introduced the NIOS Swagger API and enhanced infrastructure-as-code (IaC) support to simplify NIOS DDI integration into automation workflows and provide complete API coverage for Terraform IaC tools, so teams can confidently embed automated DDI operations into continuous integration (CI)/continuous delivery (CD) pipelines and hybrid cloud provisioning. NIOS 9.1.0 builds on that foundation by introducing automation‑friendly universally unique identifiers (UUIDs), API‑driven OAuth 2.0 authentication for Ping Identity, streamlined Azure provisioning, and more, helping teams execute DDI operations faster while reducing manual effort and risk.
NIOS 9.1.0 also strengthens security and resilience with new IPv6, DNSSEC and cloud high-availability enhancements that make it easier to respond to changing business and regulatory requirements. Together, these additions reinforce our commitment to continually expanding the capabilities, reliability, and agility of Infoblox’s flagship DDI solution, and to continuously delivering more value for your NIOS investment.
Quick Links for Universal DDI
Quick Links for NIOS DDI
Subscribe to the Infoblox Status page to receive real-time notifications on maintenance upgrades.
SECURITY
Infoblox Managed Rules for AWS Network Firewall
Coming Soon – General Availability (GA) on March 25, 2026
Infoblox Managed Rules for AWS Network Firewall adds curated, predictive DNS‑based rule groups directly into AWS Network Firewall policies to help block phishing, command‑and‑control and data‑exfiltration traffic before it reaches cloud workloads. Delivered and updated natively in the AWS Network Firewall console, these Suricata‑compatible rule groups will be continuously refreshed with Infoblox DNS threat intelligence to strengthen defense‑in‑depth across VPCs while keeping operations simple. Subscribe to Infoblox Managed Rules directly from the AWS Network Firewall console or via the Infoblox Managed Rules for AWS Network Firewall listing on the AWS Marketplace here.
Quick Links for Security
Subscribe to the Infoblox Status page to receive real-time notifications on maintenance upgrades.
ECOSYSTEM
Ecosystem: Palo Alto Networks Cortex XSIAM (SIEM)
Now Available
Infoblox and Palo Alto Networks XSIAM have partnered to integrate DNS and IPAM activity into XSIAM, streamlining event logging and deepening network visibility. The integration feeds enriched IPAM metadata, DNS telemetry, threat intelligence and contextual insights into XSIAM to strengthen correlation, hunting and investigation.
A deployment guide will be available in the Infoblox Ecosystem Portal to illustrate how to forward syslog output from Infoblox via the Cloud Data Connector (CDC) into the Palo Alto Networks SIEM environment with clear configuration steps. Additional information is available in the recently published solution note.
END-OF-LIFE / END-OF-SUPPORT
RPZ Feed Revamp: Update Enforcement for Infoblox Threat Defense
Projected Date: April 30, 2026
The new RPZ Feed Revamp for Infoblox Threat Defense delivers a simplified feed structure, more threat indicators and intuitive feed names with built‑in risk levels so you can better align policy actions with risk tolerance. To reduce complexity and keep innovation focused on the new model, Infoblox will automatically migrate any remaining policies still using the old feeds to the new feeds starting April 30, 2026. After which, the old feeds will be removed and fully deprecated. With an extended transition window of more than one and a half months, upgrading ahead of April 30, 2026, lets you manage this change on your own schedule. The upgrade can be completed with a single click in the Policy screen. For more information, please refer to the Configuration Guide.
RPZ Feed Revamp: Update for NIOS
Projected Date: April 30, 2026
The new RPZ Feed Revamp for NIOS provides a simplified response policy zone (RPZ) structure, more threat indicators and intuitive RPZ names with built‑in risk levels so you can better align policy actions with risk tolerance. To focus on innovation and reduce the complexity of supporting legacy RPZs, Infoblox will stop updating the old RPZs with new indicators starting April 30, 2026, and those RPZs will eventually carry no indicators. To maintain effective protection, Infoblox strongly recommends updating your NIOS RPZ configurations by removing the old RPZs and replacing them with the new ones. For more information, please refer to the Configuration Guide.
INFOBLOX THREAT INTELLIGENCE
New Research Available
Infoblox Threat Intel is the leading creator of original DNS threat intelligence, uniquely able to interpret DNS at scale and discover what others can’t. We use deep visibility into the internet’s inner workings to predict, uncover and disrupt threat actors before they strike.
Visit Infoblox Threat Intel to get direct access to content and stay up to date on the latest threat research.
Compromised Routers, DNS and a TDS Hidden in Aeza Networks: Infoblox Threat Intel uncovered a large-scale campaign in which attackers compromised vulnerable routers and changed their DNS settings to route traffic through malicious “shadow DNS” servers hosted in Aeza Networks. This infrastructure supports a hidden traffic distribution system (TDS) that selectively redirects users to scam, affiliate and potentially malicious content while evading traditional detection. The research underscores why securing DNS as a core trust layer is critical for modern environments. To dive deeper into the infrastructure, techniques, and mitigation guidance, read the full research article.
Banners, Bots and Butchers: An Automated Long Con Targeting Japan, Asia and Beyond: Infoblox researchers exposed a hybrid cryptocurrency investment scam that blends malvertising with “pig butchering” to defraud victims, especially in Japan and across Asia, through highly automated campaigns. Deceptive ads that impersonate financial experts or AI investment tools drive users to lure sites and then into messaging apps, where automated or AI-driven bots pose as investment advisors, build trust and gradually escalate fraudulent investment. Infoblox identified over 23,000 domains tied to this ecosystem, highlighting the industrial scale and infrastructure behind these operations. This research demonstrates how hybrid, automation-driven threats signal an evolution in large-scale social engineering and financial fraud. To learn more, read the full blog.
