Try our new research platform with insights from 80,000+ expert users

Infoblox BloxOne Threat Defense vs Zscaler Internet Access comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Infoblox BloxOne Threat Def...
Average Rating
8.0
Reviews Sentiment
5.4
Number of Reviews
15
Ranking in other categories
Domain Name System (DNS) Security (6th)
Zscaler Internet Access
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
52
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Internet Security (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Infoblox BloxOne Threat Defense is designed for Domain Name System (DNS) Security and holds a mindshare of 5.7%, up 5.3% compared to last year.
Zscaler Internet Access, on the other hand, focuses on Secure Web Gateways (SWG), holds 15.9% mindshare, down 17.3% since last year.
Domain Name System (DNS) Security
Secure Web Gateways (SWG)
 

Featured Reviews

Igor Van Den Ouden - PeerSpot reviewer
A hybrid solution for DNS security with insights and security reports
The most valuable feature is policy redirecting and security reports. It detects threats and blocks them. Also, it offers DNS handling and data extraction. It provides a centralized view of connected users and incoming data sources. It is integrated via the API to different monitoring systems that send out alerts. We haven't had any false positives due to this solution.
ShanavasVK - PeerSpot reviewer
Helps maintain a consistent posture of internet security while getting rid of VPN and hovering into zero trust
There could be a better way for the tool to categorize the traffic. For example, the tool does exceptions and everything overall. If I want to give guest access or provide access to guest users or any other internet access and if it does not go through the SSL inspection because, in our company, we can't have the root certificate on a device that we don't manage, which can be called out as an exception or an exclusion, but that doesn't provide a proper reflection of the picture of what is happening in the environment. There are granularities bringing it down. The tool I used or still have is Zscaler Cloud Connector to protect the cloud environment, which can have a bit more user-friendly installation and setup, and it would help a lot. The deployment process of Zscaler Cloud Connector needs to be more user-friendly. Improvements are required in the exception category. For example, suppose I report on a monthly basis what the breaches and traffic violating the SSL inspection area are coming from. In that case, I may find that half of them may be coming through some guest network, meaning the tool doesn't differentiate between the guest or normal networks or the corporate networks. Having options to differentiate different networks would be ideal so that it can show a true picture of things to users, as half of the things in the tool are not in our control and are not of our concern.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"When it comes to helping to detect DNS threats, BloxOne is good on all fronts. The number of false positives is very low, close to none. More than once it has detected new names or lookalike names and protected us and saved us from bad characters."
"The most valuable feature of this solution is the granularity for which you can categorize what you want to block versus what you don't want to block."
"Our ability to detect data exfiltration was minimal before Infoblox and the cloud portal was instituted for us. In terms of DNS security as a whole, we had some capability with our firewalls, but this is a lot more specialized because we're sending all of our DNS requests to Infoblox. I'd say we improved 100%."
"With the model we have, we are able to scale very easily if we need to."
"The reporting ability is helpful. It allows us to control what our users are able to resolve, and then be able to see reports on that."
"BloxOne provides automatic sharing of network context data, which affects our speed of threat response and provide real-time threat intelligence. Our security operations needs this to do their work. It makes us feel safer."
"Infoblox has helped us improve in the way that we look at data as it comes in and out. We monitor and manage queries from every device that sits inside our company, e.g., every user, every laptop, and every query. When you type something into the web, Infoblox will scan or manage that. If it is going somewhere bad, then it will block them. From a metrics perspective, it gives us data, letting us go back and find those impacted or infected clients to either clean their devices or remove them from the network."
"The automatic blocklists are most valuable. A box can maintain several lists from which we can choose if we need to block more or less. We don't have to manually manage the lists ourselves. They're automatically updated."
"The most valuable feature is bandwidth control."
"The solution offers a distributed organization to master and to control all of the endpoints."
"SSL inspection is a valuable feature."
"I would recommend Zscaler Internet Access due to its ease of use and deployment, with a user-friendly interface."
"Zscaler Web Security protects our users in remote locations from internet threats - even if they are not connected to our network."
"Zscaler Internet Access has helped us reduce the time that we spend managing security policies by about four hours a week. We can use this time to focus on other things, especially the IT team."
"The best thing about Zscaler Internet Access is the website filtering. In the UAE it's quite an important feature because most of the malware comes through the SQL injection and through downloads from websites. Zscaler helps protect against that."
"Whether you are in a hotel somewhere, or in Africa, it does not matter. You will get the Zscaler protection presence anywhere."
 

Cons

"The integration of threat intelligence with other solutions is challenging. If I want to expose threat intelligence, I cannot do it via taxi services. I have to call the API, but the customers are not into creating the APIs. The integration of embedded threat intelligence with other platforms should be better. Infoblox should work on this, and it should be easier for the end user to integrate it. It is very easy to deploy this solution. We should be able to integrate it with other platforms, such as the Next-Generation Firewall, with the same ease."
"The onboarding is a little rough at times, and you need to have some information at hand. It is pretty good, but it would be useful to have a few good examples to set up things like data exfiltration."
"The product could be cheaper."
"The dashboard and reporting features need improvement. The user needs more informative dashboards so they can get to the results directly without getting deep in the report to get to the information."
"The setup was horrible. About a year ago, Infoblox made us re-enroll all our on-prem DNS servers by a set date to a specific version, or it would stop working. I told my colleague, "Oh, here, we have to upgrade the servers and reconnect them to the CSP." That did not go well at all."
"We would like to see more reporting capabilities that are now offered only with the on-premises reporting appliance."
"The documentation needs to be improved because there are a lot of different models that it can be deployed in, and it's somewhat confusing determining what you need and how to set it up to best cover your use cases."
"They could work on the UI of their website and make their website more user-friendly."
"The solution can be improved by advancing some of the newer technologies such as the DLP feature, and adding email security."
"In every cloud service in the world, you have multiple upstream internet providers to create diversity so that if one of your providers fails, your network just continues. In South Africa, there is only one upstream provider, and that's not right. That that's a problem."
"The solution's technical support needs to be improved, especially by offering a better support structure for different geographical areas."
"It also needs better integration with other applications as well. There are some restrictions."
"An improvement would be if they could provide an out-of-the-box experience, like 20 to 30 features all ready to go. In comparison, LogRhythm offers out-of-the-box features. With Zscaler Internet Access, there is firewall IPS, multiple security services, filtering, DLP, and CASB browser isolation. These are things that all users are going to be using. However, when an administrator or architect would start building this, I would definitely need to engage professional services to help clients do it."
"One thing that needs to be improved is their presence in China. I'm not sure if that's a Zscaler thing or if it's a problem with all vendors in this space, but it would be nice to have better coverage in China. This concern is a common one for vendors across the board when dealing with the Chinese market."
"We'd like to have more plugins and integration."
"Zscaler Internet Access can improve by adding traffic filtering based on the DNS."
 

Pricing and Cost Advice

"Infoblox BloxOne offers pretty good documentation. Check its documentation, then do a PoC. Infoblox is very good at providing PoCs."
"It is a very expensive system. You need to go over the licensing before purchase to make sure you're getting what is needed, not anything extra."
"There is a significant charge for this product but I think that it's worth it when we look at what it's able to prevent."
"The licensing is set up such that you pay for the number of active users that you're defending at the moment."
"When you buy the subscription, there are no additional costs to add any additional buttons."
"It's a pricey solution because it's for the advanced kind of customer."
"If you only wanted the DNS filtering and none of the other products built into Threat Defense, it would be nicer if they could do that a la carte since we are not really using a lot of the solution."
"It is a few pounds per user per month."
"Price-wise, the tool is reasonable compared to the other products in the market but it is not a very low-priced tool. The solution does provide value for money."
"The price of Zscaler Internet Access should improve, it is expensive."
"There are multiple bundles: enterprise, business, and transformation. Transformation includes all the features, but recently I've seen a few more line items that are additional costs. Overall, it's expensive."
"The pricing is an issue. It is expensive compared to other firewalls on the market."
"We have found the solution to be expensive."
"Roughly, we might spend $70,000 a month on the solution. We don't pay for anything beyond the standard licensing fee."
"ZIA follows a subscription model pricing and charges you based on the number of users. I would say its price is good."
report
Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.
838,713 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
16%
Government
8%
Healthcare Company
7%
Educational Organization
25%
Computer Software Company
13%
Financial Services Firm
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Infoblox BloxOne Threat Defense?
The most valuable feature is policy redirecting and security reports.
What is your experience regarding pricing and costs for Infoblox BloxOne Threat Defense?
The product is expensive depending on all features. I rate the product’s pricing an eight out of ten, where one is cheap, and ten is expensive.
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zscaler Internet Access is a good option for carrying out multiple security functi...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify and manage cloud applications, protecting your sensitive data from exfiltration....
 

Also Known As

BloxOne Threat Defense, Infoblox ActiveTrust, Infoblox ActiveTrust Cloud
ZIA
 

Overview

 

Sample Customers

Council Rock School District, EagleView, Schneider Electric, Baptist Memorial Health Care, American University
Ulster-Greene ARC, BanRegio, HDFC, Ralcorp Holdings Inc., British American Tobacco, Med America Billing Services Inc., Lanco Group, Aquafil, Telefonica, Swisscom, Brigade Group
Find out what your peers are saying about Infoblox BloxOne Threat Defense vs. Zscaler Internet Access and other solutions. Updated: July 2020.
838,713 professionals have used our research since 2012.