Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

Reporting

Reply

Rogue device detection

New Member
Posts: 1
986     1

Hi,

We use InfoBlox in our organisation, primarily for DHCP functionality. I am reaching out to see if there is an option within InfoBlox to detect an unauthorized machine requesting a DHCP address? 

 

Is there any way you can run a report that can inspect the hostname and flag anything non conforming i.e first 4 characters of hostname for example?

 

Kind Regards

 

Amit

Re: Rogue device detection

[ Edited ]
Superuser
Posts: 81
986     1

Hello, 

 

If you have Infoblox reporting solution in place, you may explore the data within ib_dhcp_lease_history index(Something like : NOT OPTION12HOST="startstring*" etc). Note that there are other indexes that you could explore too.

 

Best regards,

Showing results for 
Search instead for 
Did you mean: 

Recommended for You