In Case You Missed It
Last month's product updates can be found in August's communication.
Experience What's Next With Infoblox Labs
What challenge is putting pressure on your network, security, or cloud operations? Infoblox Labs gives you a hands-on way to explore how the Infoblox Platform helps teams run as one, on an authoritative foundation.
Choose from practical scenarios spanning hidden cloud assets, hybrid and multi-cloud operations, preemptive threat disruption, asset visibility, and application modernization. Experience the challenge, see how network, security, visibility, and automation connect and discover the next capability worth exploring.
Explore Infoblox Labs and find the experience closest to your environment.
Now Available
- Infoblox Universal DDI™ Management:
- Auto Cleanup of Discovered DNS Objects
- Split Range Support for NIOS and NIOS-X as a Service
- New White Paper on Modernizing the Federal Network Service Control Plane
- NIOS DDI: vNIOS Support in AWS China Region
- Infoblox Universal Asset Insights™:
- Expanded Discovery Coverage
- Advanced Search for Provider Data
- Infoblox Threat Defense™:
- Clear DNS Forwarding Proxy (DFP) Cache
- DFP Source-Based Query Routing
- Exposure Management:
- Threat Hunting Analytics Tab
- Third-Party Risk Workspace
- External Asset Risk Discovery
- Brand Protection Dashboard
- Ecosystem:
- SentinelOne EDR Integration
- Fortinet SIEM Integration
Coming Soon
- Infoblox Portal (North America):
- Update to Outbound IPv6 Addresses Required
- Update to Outbound IPv4 Addresses Required
- Product-Based Navigation Experience
- Infoblox Universal DDI Management:
- Microsoft DNS Zone Replication
- Microsoft DHCP Synchronization and Conflict Management
- Shared Record Groups
- Microsoft DHCP Failover Management
- NIOS DDI: DNSSEC Root KSK Rollover Support
- Infoblox Universal Asset Insights:
- Expanded Discovery Coverage
- Native IoT Discovery
- Discovery Source Recommendations
- Infoblox Threat Defense:
- Threat Actor Monitor
- Infoblox for Amazon R53 Resolver DNS Firewall
Infoblox Threat Intel
- The Hidden Security Risks and Economic Value of Expired Domains
- Inside an Advanced Phishing Campaign Targeting Global Institutions
Infoblox Portal
Coming Soon
Beginning October 15, 2026, new IPv6 addresses for the Infoblox-hosted Block/Redirect page will be active. Customers with restricted outbound firewall, proxy or other security device policies should allow these IPv6 addresses before October 15, 2026, to help ensure uninterrupted access to the Block/Redirect page. Existing IPv4 redirect addresses will remain unchanged. For questions or assistance, open a support ticket.
New Redirect IPv6 Addresses (active starting Oct 15, 2026):
- 2600:1f18:68e9:d501:bbbb:f976:1d82:c018
- 2600:1f18:68e9:d501:9099:5155:b416:8188
- 2600:1f18:68e9:d500:9efd:6649:c6e4:99ca
- 2600:1f18:68e9:d500:b400:f5c6:c0b1:da3b
- 2600:1f18:68e9:d501:4856:1588:bf9c:b4ab
Coming Soon
Beginning October 15, 2026, traffic from the Infoblox-hosted Infoblox Portal may originate from 3.221.42.234 and/or the three new IP addresses listed below. Customers that allowlist Infoblox IP addresses should add the three new IP addresses before October 15, 2026, to help ensure uninterrupted access to the Infoblox Portal page. The current IP, 3.221.42.234, should be kept in place. For questions or assistance, open a support ticket.
Additional IPs sourced from Infoblox (active starting Oct 15, 2026):
- 54.90.77.58
- 44.208.159.216
- 3.233.108.243
Coming Soon
The Infoblox Portal will soon introduce a role-based product navigation experience that adapts to the products you have. When you sign in, you will land directly in the dashboard for the product you last used, with no extra steps. Navigation will adapt to your current product view, creating a more streamlined and personalized product experience.
Moving between products will be just as simple. Leveraging the new product selector menu, you have the ability to jump directly to another product or to a recently viewed page at any point. Shared capabilities such as Assets, IQ, Integrations and System Settings will remain available from every product, so the portal continues to feel unified even as each role gets a more focused experience.
Building on the navigation refresh delivered earlier this year, this update is part of Infoblox's ongoing investment in keeping the platform easy to navigate. Detailed menu mapping will be published in the Infoblox documentation portal ahead of the release.
Networking
Now Available
You can now automatically remove the DNS views, zones and records created by a discovery job when that job is deleted, with user controls over what gets cleaned up. This keeps orphaned objects out of your environment and reduces manual cleanup, especially in large-scale environments where a single discovery job can generate large numbers of DNS objects.
Now Available
Universal DDI now supports DHCP high availability (HA) groups in Split Range mode between NIOS-X servers on premises and NIOS-X as a Service, or between two NIOS-X as a Service cloud deployments. A single DHCP address pool is divided between the two servers, with each one assigning addresses from its own portion. This extends DHCP redundancy and load sharing to your cloud-managed environments without requiring heartbeat or lease synchronization between servers. The result is more resilient DHCP service across hybrid deployments with less configuration to maintain.
Now Available
Universal Asset Insights now includes new API integrations for Okta, Red Hat OpenStack and Fortinet FortiManager. In addition, Cisco Webex and Neat Pulse are available in Infoblox Labs, expanding visibility into collaboration and IoT devices across your environment. By correlating asset data with DDI, it helps you maintain a reliable asset inventory, improve configuration management database (CMDB) accuracy and quickly identify unmanaged, stale or misconfigured assets.
To try the new integration as part of a free Infoblox Universal Asset Insights trial, register here.
Now Available
Asset Inventory now supports advanced mode search across the full raw data collected from provider integrations across hybrid networks. With dot-notation queries, you can filter on fields that may not appear in the inventory table, including nested attributes such as account, region and attachment state. Search suggestions identify matching tables and columns up to three levels deep, helping you find relevant asset data faster. For more information, check Viewing Discovered Assets in Data Table.
Now Available
Infoblox now supports the deployment of vNIOS in AWS China Regions, giving global and China-based organizations a supported way to run Infoblox DDI in the cloud in China. This offering extends customers’ global enterprise-grade DDI foundation across on-premises and other cloud environments to include workloads running on AWS China.
Infoblox DDI in China is primarily be delivered on premises, while cloud workloads depend on native DNS/DHCP or separate tools. By running vNIOS on AWS China, you can use Infoblox for those cloud workloads and apply the same DDI policies used elsewhere. This will give you a consistent way to manage DDI across AWS China and the rest of your cloud environment. For additional information, visit our blog.
Coming Soon
You will soon be able to create and manage Active Directory-integrated Microsoft DNS zones directly from the Infoblox Portal, including configuring and changing how widely each zone replicates across your Active Directory environment. With this new capability, you will control zone creation and replication scope from the same portal you already use for the rest of your DNS estate.
Coming Soon
Soon, when you edit a Microsoft DHCP object in the Infoblox Portal, the portal will first pull the current configuration from Microsoft DHCP before applying your change. If the object has been modified since the last synchronization, you will be notified and can decide how to proceed. This helps you avoid unintentional overwrites of Microsoft-side changes and gives you confidence that what you see in the portal reflects the current authoritative state.
Coming Soon
Universal DDI will soon support native Shared Record Group (SRG) management, so you can define a reusable set of DNS records once and apply it consistently across multiple zones. When you change a shared record group, that change will automatically propagate to every zone associated with it on that provider, which reduces duplicate configuration and removes a common source of drift between zones. At release, shared record group management will be supported for NIOS Grid provider instances, with additional providers planned for a future release.
Coming Soon
Universal DDI will soon let you view and manage Microsoft DHCP failover relationships directly from the Infoblox Portal, giving you central control of DHCP redundancy instead of checking it server by server.
Coming Soon
ICANN will be rolling over the Domain Name System Security Extensions (DNSSEC) root Key Signing Key (KSK), with a new root key set to begin signing the root zone on October 11, 2026. If you run DNSSEC validation, you will need to trust the new root KSK before that date or DNSSEC validation will fail once the new key takes effect. To help you keep DNSSEC validation and the chain of trust intact, Infoblox delivered NIOS hotfixes in July 2026 that updated the root trust anchor to the new KSK and keep your systems aligned with IANA’s published keys.
To avoid DNS resolution failures during the rollover, you should apply these hotfixes before October 11, 2026. You will also be able to update the trust anchor manually if you prefer.
Coming Soon
To give you deeper visibility into IP-connected assets across on-premises and hybrid cloud environments, Universal Asset Insights will expand API-based discovery. Upcoming integrations include:
- Armis
- Nutanix Asset Discovery (On-Prem)
- Nutanix IPAM Data Discovery (On-Prem)
- Cisco ISE
| - Arista CloudVision
- Arista VelaCloud
- Tanium
- Alibaba
|
|---|
These additional integrations will further strengthen Universal Asset Insights as a reliable source of truth for asset discovery, helping you surface stale or misconfigured assets and manage complex hybrid environments with confidence.
Coming Soon
Universal Asset Insights will expand visibility into unmanaged and previously unseen IoT and OT devices through a combination of active DNS probing and network traffic analysis. Complementing existing third-party integrations, this capability will help organizations discover connected devices across their environments without relying solely on agents, credentialed scans or network changes. By providing broader visibility into IoT and OT assets, organizations will be able to reduce infrastructure blind spots, improve asset inventory accuracy and strengthen operational awareness across distributed environments.
Coming Soon
Universal Asset Insights will simplify discovery source onboarding by automatically identifying infrastructure platforms that are already active in your environment. By analyzing DNS query traffic, the solution will detect supported platforms such as Juniper Mist, Meraki and CrowdStrike, and proactively recommend relevant discovery sources within the Universal Asset Insights console. You will be able to review and connect prepopulated recommended sources in just a few clicks, reducing the time and effort required to expand asset visibility while accelerating deployment and helping ensure more complete infrastructure coverage.
Quick Links for Universal DDI
Quick Links for NIOS DDI
Subscribe to the Infoblox Status page to receive real-time notifications on maintenance upgrades.
Security
Now Available
When you update, correct or delete a DNS record, the DFP keeps serving the previous cached response until that cached entry expires. This keeps your changes from taking effect right away and can delay troubleshooting.
You can now clear the DFP cache on demand directly from the Infoblox Portal (Service Actions > Clear Cache), with no service restart required. Once the cache is cleared, subsequent queries are forwarded upstream immediately, so your corrections, new records and deletions take effect right away. The results is are faster propagation of DNS changes, quicker issue resolution and immediate enforcement of updates, all without disrupting service or waiting for the cache to expire.
Now Available
Not every device behind your DFP needs to be resolved through Infoblox Threat Defense Cloud, such as guest or other non-corporate networks. Source-based query routing gives you control over which devices are resolved through the cloud and which are sent elsewhere, helping you manage your Threat Defense utilization and direct selected devices to the resolvers you choose, all without re-provisioning static DNS settings on those devices.
With this feature, you can now direct specific subnets behind your DFP to third-party resolvers of your choice, bypassing Threat Defense Cloud resolution for just those devices. For each route entry, you map a source subnet to up to four destination resolvers in priority order; if one resolver becomes unavailable, queries automatically failover to the next. You can also enable encrypted DNS on any destination for added protection. Each DFP supports up to 16 non-overlapping route entries, and internal domain routing always takes precedence over source-based routes, so your existing internal resolution paths stay intact.
Now Available
Threat Hunting now includes an Analytics tab that transforms search results into charts and KPIs, helping you quickly understand threat volume, source mix and emerging trends. Compare results visually, assess threat scale immediately and share search-linked views with teammates or clients, so you can spend less time interpreting data and more time acting on relevant insights.
Now Available
Supply Chain Intelligence gives you a dedicated workspace to continuously monitor vendor security posture using external threat data, not just questionnaires or static reviews. Track vendor threats, exposed credentials, attack surface issues and dark web mentions in one view, with alerts, trend indicators, AI summaries and exportable reports to spot problems earlier and turn third-party risk into preemptive action.
Now Available
External Attack Surface Management (EASM) gives you continuous external asset discovery, risk-based prioritization and step-by-step remediation guidance for the exposures that matter most. Automatically identify internet-facing assets and the risks attackers are most likely to exploit, then prioritize findings by business impact and exploit feasibility. Built-in guidance, ownership controls, and workflow-friendly actions help you shorten remediation time.
Now Available
The new Brand Protection Dashboard gives you a consolidated view of stalled tickets, takedown performance, scan volume and top assets before they open the ticket list. With automatic data refresh and the most important activity surfaced at a glance, your teams can prioritize what needs attention faster and make daily operations more efficient.
Coming Soon
Infoblox’s industry-leading DNS threat intelligence will soon be natively available within Amazon Route 53 DNS Firewall, extending protection to malicious, and suspicious domains without new infrastructure, agents or DNS rerouting. Customers will be able to activate protection in minutes through the AWS console to stop phishing, command-and-control and emerging threats before they reach cloud workloads. With managed intelligence, an approximately 0.0002 percent false-positive rate and seamless integration with AWS logging and security information and event management (SIEM) workflows, the solution will deliver comprehensive protection with minimal operational overhead and no new budget line during preview.
Coming Soon
The Threat Actor Monitor gives you clear visibility into Infoblox-identified threat actors observed in your environment, with actionable context on threat actor activity, threat indicators, policy actions and proactive protection. Built into the Security Workspace, it brings together key metrics, activity patterns and intuitive drill-downs to help security teams understand risk and respond with greater confidence.
Quick Links for Security
Subscribe to the Infoblox Status page to receive real-time notifications on maintenance upgrades.
Ecosystem
Now Available
Infoblox has now added Ecosystem support with a new integration of Infoblox Threat Defense and Infoblox IQ™ for Threat Defense with SentinelOne EDR. This capability enables detected threats, such as DNS-based data exfiltration, command-and-control attempts and domain-generated algorithm (DGA) activity, to be automatically sent from Infoblox to SentinelOne. Once received, SentinelOne can instantly quarantine the affected endpoint, stopping threats at both the network and device level. This is also able to identify the endpoint process responsible for the query, allowing the security team to know when the locked-down browser is being bypassed.
Now Available
Infoblox and Fortinet have partnered to integrate security, DNS and IPAM activity into Fortinet SIEM, streamlining event logging and deepening network visibility. The integration feeds enriched IPAM metadata, DNS telemetry, threat intelligence and contextual insights into Fortinet SIEM for stronger correlation, hunting and investigation. A deployment guide is available to illustrate how to send syslog output from Infoblox via the Cloud Data Connector (CDC) into the Fortinet SIEM environment. This integration is accessible from the Ecosystem Portal with clear, supported configuration steps.
Infoblox Threat Intel
New Research Available
Infoblox Threat Intel is a leading creator of original DNS threat intelligence, with deep visibility into internet infrastructure that helps discover and disrupt threat activity others miss. The team uses this visibility to predict, uncover and block threat actors before they strike.
Visit the Infoblox Threat Intel site to access the latest research directly and stay up to date on new findings.
The Hidden Security Risks and Economic Value of Expired Domains: Expired Domains don’t simply disappear—they can be re-registered with their traffic, reputation, DNS relationships and other inherited value intact. Infoblox Threat Intel research finds that roughly 65,000 previously registered domains are re-registered every day, creating opportunities for threat actors to monetize trusted infrastructure or deliver malware.
Read the research to learn why domain security must be assessed across its entire lifecycle.
Inside an Advanced Phishing Campaign Targeting Global Institutions: This isn’t your average phishing campaign—attackers are hijacking MFA-authenticated sessions, turning trusted accounts and aged domains into weapons against enterprises and global institutions. The blog breaks down how AiTM kits like EvilProxy, FlowerStorm and Kali365 make these attacks scalable while slipping past defenses that rely on MFA, domain reputation and URL inspection.
Read this research blog to understand the DNS fingerprints these attacks leave behind, and how defenders can use them to expose malicious infrastructure before it leads to a breach.
