Network Security Manager at a tech vendor with 11-50 employees
Real User
Top 20
Jan 20, 2026
I am working in the enterprise part where we manage DNS, and we use other solutions that are oriented to provide DHCP and DNS at the enterprise level. I am referring to Infoblox. Currently, I am mostly working with Infoblox BloxOne DDI, but this is an enterprise solution that is not comparable to Cloudflare. I am not only working with BloxOne Threat Defense but also with the DDI part. Typically, Threat Defense is just an extension. Even if it could be provided as its own solution, it is typically part of a DDI migration project, and then the security is just an add-on. There have been some use cases where the RESTful API is used by some customers. Not many have been in the project, but RESTful API is a standard. The solution has almost all the methods that you find in the GUI, and you can have in the API. The automation is at least by design almost straightforward. I am currently developing a project where probably the customer will decide if they use this API or will use other mechanisms that are embedded in DNS, such as zone transfer and other update mechanisms. Infoblox BloxOne DDI provides a long list of already available reports that are based on Splunk, so they can also provide other specialization. They have a very rich list of reports for both DNS and DHCP. What I have seen in the use case and in the integration with the security part of the customer is that typically, the project provides integration with a SIEM just to add another source so that you can correlate more easily the events with the client, the server, and the host in general.
Enterprise Security Architect at a tech services company with 51-200 employees
Real User
Top 5
Nov 4, 2025
I have been using Infoblox BloxOne DDI for IPAM, which is IP address management, for quite some time, probably about four or five years. Infoblox BloxOne service and the advanced threat defense capabilities are newer. Infoblox BloxOne SaaS has probably only been available for about 18 months, nearly two years. I am still getting familiar with that. However, I have used the DDI, DHCP, and IPAM quite extensively.
I am currently working with ServiceNow, and I use Infoblox BloxOne DDI for managing DHCP and DNS services. I can add, modify, or delete DNS services or DDI devices and manage all the devices within Infoblox BloxOne DDI. It primarily helps me manage the devices giving IPs to others on the network.
For customers in Indonesia, I have implemented it in BCA, Bank Central Asia, BGP, and Bank Server Banton, mostly in the banking sector. Primarily, I use it for DNS security, particularly to block domain generation attacks. These attacks can be internal or external, targeting DNS positioning or DNS from outside or within. This has been an effective measure.
We use our Infoblox DDI platform for everything: IPAM management, DNS, DHCP, and DNS firewall functionality with their BloxOne Threat Defense cloud. We see DNS as the first layer of defense, so we use all the features the platform offers. We do not have DNS and DHCP in our Windows environment anymore.
Infoblox BloxOne DDI is an advanced service that integrates DNS, DHCP, and IP address management capabilities, designed to streamline network operations and scalability.Infoblox BloxOne DDI is tailored for cloud-first architectures, offering flexible deployment options across private, public, and hybrid cloud environments. It addresses the complexities of modern networks, enabling dynamic scaling and automating core network services. The system supports best-in-class security features and...
I am working in the enterprise part where we manage DNS, and we use other solutions that are oriented to provide DHCP and DNS at the enterprise level. I am referring to Infoblox. Currently, I am mostly working with Infoblox BloxOne DDI, but this is an enterprise solution that is not comparable to Cloudflare. I am not only working with BloxOne Threat Defense but also with the DDI part. Typically, Threat Defense is just an extension. Even if it could be provided as its own solution, it is typically part of a DDI migration project, and then the security is just an add-on. There have been some use cases where the RESTful API is used by some customers. Not many have been in the project, but RESTful API is a standard. The solution has almost all the methods that you find in the GUI, and you can have in the API. The automation is at least by design almost straightforward. I am currently developing a project where probably the customer will decide if they use this API or will use other mechanisms that are embedded in DNS, such as zone transfer and other update mechanisms. Infoblox BloxOne DDI provides a long list of already available reports that are based on Splunk, so they can also provide other specialization. They have a very rich list of reports for both DNS and DHCP. What I have seen in the use case and in the integration with the security part of the customer is that typically, the project provides integration with a SIEM just to add another source so that you can correlate more easily the events with the client, the server, and the host in general.
I have been using Infoblox BloxOne DDI for IPAM, which is IP address management, for quite some time, probably about four or five years. Infoblox BloxOne service and the advanced threat defense capabilities are newer. Infoblox BloxOne SaaS has probably only been available for about 18 months, nearly two years. I am still getting familiar with that. However, I have used the DDI, DHCP, and IPAM quite extensively.
I am currently working with ServiceNow, and I use Infoblox BloxOne DDI for managing DHCP and DNS services. I can add, modify, or delete DNS services or DDI devices and manage all the devices within Infoblox BloxOne DDI. It primarily helps me manage the devices giving IPs to others on the network.
For customers in Indonesia, I have implemented it in BCA, Bank Central Asia, BGP, and Bank Server Banton, mostly in the banking sector. Primarily, I use it for DNS security, particularly to block domain generation attacks. These attacks can be internal or external, targeting DNS positioning or DNS from outside or within. This has been an effective measure.
We use our Infoblox DDI platform for everything: IPAM management, DNS, DHCP, and DNS firewall functionality with their BloxOne Threat Defense cloud. We see DNS as the first layer of defense, so we use all the features the platform offers. We do not have DNS and DHCP in our Windows environment anymore.