Infoblox
DNS, DHCP and IP address management with security built on DNS— Infoblox’s DDI, protective DNS, asset discovery and network observability, and how each one is licensed. This hub covers eight Infoblox products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Eight intel pages. DDI, protective DNS, asset discovery and network observability.
Infoblox’s line, product by product — every linked card is a full intel page, from cloud and on-site DDI to protective DNS, exposure management and Kentik.
Infoblox Threat Defense
Blocks malicious domains at the DNS layer.
Cloud resolvers, NIOS on site, or both, plus Infoblox Endpoint for roaming devices; queries resolve in Mumbai and Hyderabad.
Infoblox Universal DDI
One SaaS console for DNS, DHCP and IPAM.
Runs NIOS Grids, NIOS-X, NIOS-X as a Service, Route 53, Azure DNS and Google Cloud DNS from one control plane; formerly BloxOne DDI.
Infoblox NIOS DDI
Grid-based DNS, DHCP and IPAM on site.
Trinzic X6 and virtual appliances joined into one Infoblox Grid; release 9.1.0 adds encrypted DNS, IPv6 DHCP changes and OAuth sign-in.
Infoblox Universal Asset Insights
Finds devices and cloud assets with an IP.
Pulls assets from DNS, DHCP, AWS, Azure, Google Cloud, CrowdStrike and Microsoft tools, and syncs them both ways with ServiceNow CMDB.
Infoblox DNS Infrastructure Protection
Keeps DNS servers answering under attack.
A NIOS add-on, formerly Advanced DNS Protection, filtering DDoS, NXDOMAIN floods, cache poisoning and hijacking aimed at DNS servers.
Infoblox Exposure Management
Watches your brand and attack surface, outside-in.
Digital risk protection and takedowns, attack-surface scoring from passive DNS and certificate logs, and supply-chain exposure.
Infoblox NetMRI
Tracks configs and changes across vendors.
Discovers multi-vendor devices, backs up configs, flags changes and checks PCI, HIPAA and DISA STIG policy; Advisor tracks advisories.
Kentik (an Infoblox company)
Flow, BGP and cloud traffic in one view.
Flow, routing, synthetic tests, cloud VPC logs and device telemetry with an AI Advisor; Kentik joined Infoblox on 6 August 2026.
Infoblox IQ
Platform & engineInfoblox’s AI layer, not a product of its own: IQ for Threat Defense is an add-on priced in Security Tokens; the rest was in early access
Dossier and Lookalike Domain Monitoring
Platform & engineThreat-research and lookalike-domain add-ons bought with Threat Defense Security Tokens, so they live on the Threat Defense page
NIOS-X as a Service
Platform & engineDNS and DHCP service points Infoblox runs for you, including in AWS Mumbai; licensed with Server Tokens, covered on the Universal DDI page
Network Insight and other NIOS features
Platform & engineLicensed NIOS features: switch-port discovery, agentless Microsoft DNS and DHCP management and DDI automation; on the NIOS DDI page
Infoblox sells across 1 of the products TechBag carries in network security & SASE. The Network Security & SASE guide shows how the category splits and which part is yours. →
Also sold in DevOps (1 product).
Why “DNS as the control point” is the whole story
Every device asks DNS before it connects, so the system that hands out addresses and names — DDI — also sees every lookup a threat makes. Infoblox builds on that: Threat Defense filters at the resolver, Asset Insights reads DNS and DHCP to find devices, and Exposure Management watches the domains outside.
Infoblox Portal
Formerly the Cloud Services Portal. Threat Defense, Universal DDI and Asset Insights are run here, from North American or European regions only.
Infoblox Grid
NIOS appliances joined into one managed system, with HA pairs, DNS anycast and DHCP failover; the Portal can oversee several Grids at once.
Token pools
Universal DDI Tokens and Security Tokens replace separate SKUs; tokens rebalance only within their own type, and type changes wait for renewal.
Infoblox Threat Intel
Infoblox says it tracks over 204,000 threat-actor clusters; its feeds include public DoH lists that stop devices sidestepping protective DNS.
Start with the job — DDI, protective DNS or asset discovery — then size the token pool it draws on.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Value Leader, EMA Radar for DDI 2025
awarded for Universal DDI; the only dated analyst placement TechBag could verify for Infoblox
No DDI Magic Quadrant exists
Gartner does not publish a quadrant for DDI, so a claimed DDI quadrant leadership cannot be right
A commissioned study, October 2023
Infoblox paid for this economic study of its DDI; it is not a Forrester Wave or an independent evaluation
Founded in Chicago
by Stuart Bailey; Infoblox is now headquartered in Santa Clara, California
Pune office and a bigger Bengaluru campus
Bengaluru passed 1,000 seats, Pune opened for engineering and Trivandrum remains a support centre
Axur acquisition completed
the Brazilian digital-risk company, closed on 5 May 2026, became the base of Infoblox Exposure Management
Kentik acquisition completed
closed on 6 August 2026; Kentik keeps its own brand, and Infoblox plans to integrate it over time
Critical flaws in NetMRI and NIOS
NetMRI 7.6.1 fixed a 9.8 unauthenticated SQL injection and four other flaws; keep NIOS on the current release
The company in six figures
See the platform, hear the pitch
Unite With Infoblox
An October 2025 clip on Infoblox’s protective DDI idea; a brand film, not a product demo.
2025 DNS Threat Landscape Report Video
A May 2026 summary of the DNS attack trends Infoblox Threat Intel saw during 2025.
Closing the Infrastructure Visibility Gap
A July 2026 explainer on seeing assets across cloud, on-premises, edge and IoT networks.
Where Infoblox sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
Infoblox Across Its Solution Areas
Each dot is a Infoblox solution area: competitive position vs category momentum.
Universal DDI and NIOS together; Universal DDI was named a Value Leader in the EMA Radar for DDI 2025 and can manage NIOS Grids.
DDI Coverage × Protective DNS Coverage
How far each vendor covers DNS, DHCP and IPAM vs how far it filters malicious domains at the DNS layer.
DDI on site and in the cloud plus protective DNS; Threat Defense and Universal DDI are quoted, NIOS PayGo hourly on AWS.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with Infoblox?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Where must it run?
3. Who will own it?
Eight products, four jobs
DDI hands out addresses and names, Threat Defense blocks bad domains, Asset Insights finds devices and Kentik watches the traffic.
Read →Universal DDI or NIOS?
Universal DDI is the SaaS control plane, NIOS the on-site Grid; Universal DDI manages NIOS Grids, so many run both.
Read →Names that changed
Universal DDI was BloxOne DDI and Threat Defense was BloxOne Threat Defense; older quotes still use those names.
Read →Counting Security Tokens
Threat Defense Cloud needs three tokens per device or workload sending DNS queries, on a rolling three-month average.
Read →Where your DNS data lives
Queries resolve in Mumbai or Hyderabad, but the Portal and logs sit in North America or Europe. Weigh that for DPDP.
Read →Where Threat Defense fits
The Network Security & SASE category’s Secure Web & DNS guide compares DNS-layer filtering with proxies and SASE.
Read →The acronym decoder
Every term on these pages, in one place- DDI
- DNS, DHCP and IP address management run as one system rather than three separate tools.
- Protective DNS
- A DNS resolver that refuses to answer for domains known or predicted to be malicious.
- Infoblox Grid
- Infoblox’s patented way of joining NIOS appliances into one centrally managed system.
- Infoblox Portal
- The SaaS console, formerly the Cloud Services Portal, hosted in North America or Europe.
- Security Token
- Threat Defense’s licence unit; Threat Defense Cloud uses three per protected asset.
- Management Token
- The required Universal DDI unit, counted on DDI objects, active IPs and assets.
- NIOS-X as a Service
- DNS and DHCP service points that Infoblox hosts, with no Infoblox kit on your site.
- DNS Forwarding Proxy
- A small Infoblox service on your network that forwards local DNS to Threat Defense.
- Infoblox Endpoint
- The roaming agent, formerly BloxOne Endpoint, that sends a device’s DNS to Threat Defense.
- RPZ
- Response Policy Zones: the DNS firewall standard NIOS uses to rewrite risky lookups.
- DRPS
- Digital risk protection services: finding and taking down fake sites, apps and profiles.
- EASM
- External attack surface management: mapping what an outsider can see of your estate.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Name the job first
DDI, protective DNS, asset discovery and observability are bought differently: two token pools, NIOS licences and Kentik’s own annual contract.
Count protected assets
Threat Defense Cloud takes three Security Tokens for each device or workload that sends DNS; heavy query sources can count more than once.
Size the Universal DDI pool
Management Tokens are required, sold in packs of 1,000; Server Tokens (packs of 500) and Reporting Tokens (packs of 40) are optional extras.
Decide where DNS is answered
Cloud resolvers in Mumbai and Hyderabad, NIOS on site, or a mix. The Portal and its logs stay in North America or Europe either way.
Patch before you rely on it
Move NetMRI to 7.6.1 or later, which fixed a 9.8 unauthenticated SQL injection, and keep NIOS on the current release before go-live.
Get it priced in rupees
Infoblox publishes no INR prices. TechBag counts assets and tokens, sets cloud against NIOS and quotes the total in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Threat Defense | Security Tokens · three per protected asset on the cloud service, by appliance model on NIOS · rolling three-month average | Quote or private offer | Protective DNS |
| Universal DDI | Management Tokens required, in packs of 1,000 · Server Tokens (500) and Reporting Tokens (40) optional | No public unit price | Cloud-managed DDI |
| NIOS DDI | Appliance and software licences · NIOS PayGo billed by the hour on AWS and Azure | PayGo $2.25–$40.00/hr + EC2 | On-site DDI |
| Universal Asset Insights | Management Tokens per asset with an IP, drawn from the Universal DDI pool | No separate price | Asset inventory |
| DNS Infrastructure Protection | NIOS software add-on, licensed separately | No public price | DNS server defence |
| Exposure Management | Own subscription and IEM Portal | No public price | Brand and exposure monitoring |
| NetMRI | Separate product with its own release line, now 7.6.x | No public price | Config and change control |
| Kentik | Annual contracts · Pro includes 50 users, 1,000 flows per second and 25 NMS devices | Pro from US$2,000/mo · 30-day trial | Network observability |
Threat Defense and Universal DDI are licensed with tokens and sold by quote or private offer; NIOS PayGo is listed hourly on AWS, and Kentik publishes its Pro price. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Assuming Indian data residency
DNS queries resolve in Mumbai and Hyderabad, but the Infoblox Portal, its logs and reports are hosted in North America or Europe only.
Budgeting Threat Defense per user
Infoblox dropped per-user licensing. Count every device and workload that sends DNS, since each takes three Security Tokens.
Reading a Marketplace listing as a price
Infoblox’s AWS listing for Universal DDI does not say what quantity it buys; size the deal against your own token count instead.
Buying DNS Infrastructure Protection for users
It shields DNS servers from floods and poisoning. Blocking users from malicious domains is the job of Threat Defense.
Quoting old product names
Check that a quote names Universal DDI (formerly BloxOne DDI), Threat Defense (formerly BloxOne Threat Defense) and current SKUs.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: DNS vendors are moving outward into exposure and observability — which is where Infoblox bought Axur and Kentik.
AI agents in DNS operations
Infoblox announced Infoblox IQ on 3 June 2026 for Threat Defense; IQ for DDI is in early access until fall 2026.
What it means for you
Judge IQ for DDI once it ships, not on the announcement.
Licensing by device, not by seat
Threat Defense moved off per-user licensing to Security Tokens, three for each protected asset on the cloud service.
What it means for you
Count devices and workloads, not staff, before asking for a quote.
DNS vendors looking outward
Infoblox closed Axur in May 2026; its attack-surface monitoring found dangling CNAMEs at 31 of about 40 early users.
What it means for you
Your public DNS records are an attack surface too.
Consolidation in DDI
Infoblox closed Kentik on 6 August 2026; Francisco Partners announced an EfficientIP purchase in June 2026.
What it means for you
Ask each vendor for its product roadmap in writing.
Questions buyers ask about Infoblox
Ready to shortlist Infoblox?
Open any of the eight intel pages for the deep dive, or let a TechBag advisor build the case with you — the assets to protect, the token pools, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.