Through integration with Infoblox Threat Intelligence Data Exchange (TIDE), part of BloxOne Threat Defense, Farsight Security's Newly Observed Domains (NOD) data service continuously alerts Infoblox BloxOne Threat Defense platform users to the first-observed presence of domains in DNS.
BloxOne Threat Defense strengthens and optimizes an organization's security posture from the foundation up. It maximizes brand protection by securing traditional networks as well as digital imperatives like SD-WAN, IoT and cloud. It uses hybrid architecture for pervasive, inside-out protection against today's advanced malware threats, data exfiltration, lookalike domain threats, DGAs and more. The solution also powers security orchestration, automation and response (SOAR) solutions by providing rich network and threat context, optimizes the performance of the entire security ecosystem and reduces the total cost of enterprise threat defense.
Farsight's NOD feed identifies an average of 150,000 new domains each day, typically within 60 seconds of first appearance in the global DNS. Streamed at 1 Gb/second, Farsight NOD data is formatted to be ingested directly by the Infoblox TIDE platform, or queried directly for investigative purposes through Infoblox's Dossier service, part of BloxOne Threat Defense.
