Try our new research platform with insights from 80,000+ expert users

Infoblox BloxOne Threat Defense vs Zscaler Internet Access comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Infoblox BloxOne Threat Def...
Average Rating
8.0
Reviews Sentiment
6.0
Number of Reviews
16
Ranking in other categories
Domain Name System (DNS) Security (6th)
Zscaler Internet Access
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
52
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Internet Security (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Infoblox BloxOne Threat Defense is designed for Domain Name System (DNS) Security and holds a mindshare of 5.9%, up 5.2% compared to last year.
Zscaler Internet Access, on the other hand, focuses on Secure Web Gateways (SWG), holds 15.6% mindshare, down 17.2% since last year.
Domain Name System (DNS) Security
Secure Web Gateways (SWG)
 

Featured Reviews

Igor Van Den Ouden - PeerSpot reviewer
A hybrid solution for DNS security with insights and security reports
The most valuable feature is policy redirecting and security reports. It detects threats and blocks them. Also, it offers DNS handling and data extraction. It provides a centralized view of connected users and incoming data sources. It is integrated via the API to different monitoring systems that send out alerts. We haven't had any false positives due to this solution.
ShanavasVK - PeerSpot reviewer
Helps maintain a consistent posture of internet security while getting rid of VPN and hovering into zero trust
There could be a better way for the tool to categorize the traffic. For example, the tool does exceptions and everything overall. If I want to give guest access or provide access to guest users or any other internet access and if it does not go through the SSL inspection because, in our company, we can't have the root certificate on a device that we don't manage, which can be called out as an exception or an exclusion, but that doesn't provide a proper reflection of the picture of what is happening in the environment. There are granularities bringing it down. The tool I used or still have is Zscaler Cloud Connector to protect the cloud environment, which can have a bit more user-friendly installation and setup, and it would help a lot. The deployment process of Zscaler Cloud Connector needs to be more user-friendly. Improvements are required in the exception category. For example, suppose I report on a monthly basis what the breaches and traffic violating the SSL inspection area are coming from. In that case, I may find that half of them may be coming through some guest network, meaning the tool doesn't differentiate between the guest or normal networks or the corporate networks. Having options to differentiate different networks would be ideal so that it can show a true picture of things to users, as half of the things in the tool are not in our control and are not of our concern.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is blocklisting. It's good at what I like to describe as the "silly side cases." We have this annoying security architecture that says we must do this, that, and the other, so we try to make it easier on ourselves."
"The product is stable."
"Using the reporting, we can tell that we have gained an extra layer of protection. Just by looking at it, we can see what is being blocked before it even makes it to the firewall. It is definitely working."
"Infoblox has helped us improve in the way that we look at data as it comes in and out. We monitor and manage queries from every device that sits inside our company, e.g., every user, every laptop, and every query. When you type something into the web, Infoblox will scan or manage that. If it is going somewhere bad, then it will block them. From a metrics perspective, it gives us data, letting us go back and find those impacted or infected clients to either clean their devices or remove them from the network."
"The most important features for us are preventing DDOS DNS attacks."
"BloxOne provides automatic sharing of network context data, which affects our speed of threat response and provide real-time threat intelligence. Our security operations needs this to do their work. It makes us feel safer."
"With the model we have, we are able to scale very easily if we need to."
"The stability of Infoblox BloxOne Threat Defense is near perfect at a rating of ten."
"In terms of management and visibility, there is a single panel where you can configure the policies for your entire organisation worldwide."
"Zscaler Internet Access has helped us reduce the time that we spend managing security policies by about four hours a week. We can use this time to focus on other things, especially the IT team."
"We like Zscaler's traffic filtering, web security, DLP, and IPS features. The real-time threat protection is excellent."
"I like the granularity of the control of all the traffic, including SSL inspection. I also like the fact that the user interface is intuitive. The latencies with Zscaler are minimal compared to those of any other competitor. Other competitors do not really have the global scale that Zscaler has and cannot promise low latencies."
"The solution's most valuable features are its reliability and availability, measured by the number of ports it offers."
"The solution replaces multiple vendor technologies with one which makes it worth the cost."
"It is easy to set up the solution."
"There is no lag in service when accessing the internet."
 

Cons

"The product could be cheaper."
"The documentation needs to be improved because there are a lot of different models that it can be deployed in, and it's somewhat confusing determining what you need and how to set it up to best cover your use cases."
"The initial setup is not a simple "click-click-next" installation. It requires some level of experience ."
"Within the past two years, we discovered certain bugs in their products. The resolution of these bugs took a little too much time, especially if our production environment is down for a certain amount of time, then we are losing money. That is hard to convey to Infoblox support, e.g., we actually need the system up and running again within two or three hours. The awareness of these so-called production down incidents is not really easy to convey."
"The setup was horrible. About a year ago, Infoblox made us re-enroll all our on-prem DNS servers by a set date to a specific version, or it would stop working. I told my colleague, "Oh, here, we have to upgrade the servers and reconnect them to the CSP." That did not go well at all."
"Infoblox BloxOne Threat Defense is quite expensive, especially due to the significant increase in the subscription fee after the first year. This unexpected increase was a problem for us."
"A lot of their documentation needs improvement."
"This is not just Infoblox, this could be any portal provider, cloud provider, sometimes they change the look of the customer-facing options and it's not completely clear why they make the change."
"Zscaler should continue to make the user interface better. They should also improve the backup network and continue to expand it so that it can handle larger numbers of customers."
"The solution's technical support needs to be improved, especially by offering a better support structure for different geographical areas."
"I would like to see the ability to choose a pool of IPs for my company, set up rules based on them, and know that those IPs are not used by other companies."
"The main issue with Zscaler Internet Access is proxy IP detection, which sometimes makes sites inaccessible."
"Zscale is providing a proxy IP, and most government sites will block traffic from a proxy. Also, we see some performance issues on the cloud side during DC failover."
"An improvement would be if they could provide an out-of-the-box experience, like 20 to 30 features all ready to go. In comparison, LogRhythm offers out-of-the-box features. With Zscaler Internet Access, there is firewall IPS, multiple security services, filtering, DLP, and CASB browser isolation. These are things that all users are going to be using. However, when an administrator or architect would start building this, I would definitely need to engage professional services to help clients do it."
"One thing that they could improve is the ability to import rules from other platforms."
"In terms of usage, here in the GCC, it's still growing a growing market, so the combination of DLP, data leak prevention, to a certain extent is fine. But what it requires is user-based access or role-based access. The solution needs to grow into that, which definitely takes time. There's not an easy way to integrate it, when you have a cloud-based solution."
 

Pricing and Cost Advice

"It's a pricey solution because it's for the advanced kind of customer."
"If you only wanted the DNS filtering and none of the other products built into Threat Defense, it would be nicer if they could do that a la carte since we are not really using a lot of the solution."
"It is a very expensive system. You need to go over the licensing before purchase to make sure you're getting what is needed, not anything extra."
"When you buy the subscription, there are no additional costs to add any additional buttons."
"There is a significant charge for this product but I think that it's worth it when we look at what it's able to prevent."
"Infoblox BloxOne offers pretty good documentation. Check its documentation, then do a PoC. Infoblox is very good at providing PoCs."
"The licensing is set up such that you pay for the number of active users that you're defending at the moment."
"ZIA follows a subscription model pricing and charges you based on the number of users. I would say its price is good."
"We pay around 6,500 INR per user per year, which is very expensive. I would rate Zscaler's pricing one out of five."
"We have found the solution to be expensive."
"If we need any extra features, the price will increase."
"The price is competitive. It's not cheap and it's not expensive."
"There are multiple bundles: enterprise, business, and transformation. Transformation includes all the features, but recently I've seen a few more line items that are additional costs. Overall, it's expensive."
"Because it's a cloud solution, we pay on a yearly basis. It is affordable and includes tech support and all features."
"It is costlier than other solutions."
report
Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.
848,716 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
18%
Computer Software Company
14%
Government
8%
Manufacturing Company
6%
Educational Organization
22%
Computer Software Company
14%
Financial Services Firm
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Infoblox BloxOne Threat Defense?
The most valuable feature is policy redirecting and security reports.
What is your experience regarding pricing and costs for Infoblox BloxOne Threat Defense?
Infoblox BloxOne Threat Defense is quite expensive, especially due to the significant increase in the subscription fee after the first year. This unexpected increase was a problem for us.
What needs improvement with Infoblox BloxOne Threat Defense?
The UI performance could be better in the future, as sometimes there are delays. Additionally, DNS resolution speed could be improved to match that of Google DNS or Cloudflare DNS ( /products/cloud...
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zscaler Internet Access is a good option for carrying out multiple security functi...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify and manage cloud applications, protecting your sensitive data from exfiltration....
 

Also Known As

BloxOne Threat Defense, Infoblox ActiveTrust, Infoblox ActiveTrust Cloud
ZIA
 

Overview

 

Sample Customers

Council Rock School District, EagleView, Schneider Electric, Baptist Memorial Health Care, American University
Ulster-Greene ARC, BanRegio, HDFC, Ralcorp Holdings Inc., British American Tobacco, Med America Billing Services Inc., Lanco Group, Aquafil, Telefonica, Swisscom, Brigade Group
Find out what your peers are saying about Infoblox BloxOne Threat Defense vs. Zscaler Internet Access and other solutions. Updated: July 2020.
848,716 professionals have used our research since 2012.