SOURCE: Infoblox


December 14, 2009 09:01 ET

Infoblox Delivers the Industry's Most Automated DNSSEC Solution

Fully Automated Key Management and Rollover Eliminates Barriers to DNSSEC Adoption

SANTA CLARA, CA--(Marketwire - December 14, 2009) - Infoblox Inc. today announced availability of additional functionality to help organizations simplify deployment of the Domain Name System Security Extensions (DNSSEC), a suite of IETF specifications for securing information provided by DNS.

Many security researchers are expressing growing alarm over the state of DNS security. Security researcher Dan Kaminsky, Director of Penetration Testing at IO Active who exposed the "Kaminsky DNS vulnerability" and is advocating implementation of DNSSEC, commented: "The lack of DNS security not only makes the Internet vulnerable, but is also crippling the scalability of important security technologies. DNSSEC offers the most feasible solution to a serious threat."

And, underscoring the importance of DNS security and DNSSEC, implementation of DNSSEC is mandated for U.S. Federal government agencies by the end of December 2009.

However, DNSSEC adoption until recently has been slow, hampered by concerns over the operational complexity associated with provisioning and distributing encryption keys and the overhead required to digitally sign DNS information. Implementing DNSSEC using DNS freeware or general-purpose operating systems requires the execution of numerous, time consuming and error prone steps each time DNS data are added or modified.

Infoblox addresses this with its "one-click DNSSEC" solution that replaces manual key generation and zone signing with a one-click process that generates and securely distributes encryption keys to all appliances in the Infoblox grid that serve DNSSEC data. Infoblox also automates the critical process of periodically changing keys, also known as "key rollover," which is essential to ensuring that secure DNS data cannot be compromised. Keys are rolled over automatically according to best practices recommended by the National Institute of Standards and Technology (NIST-800-81) and RFC 4641 standards. DNSSEC records are signed and re-signed automatically each time DNS data are changed. This eliminates dozens of error-prone, manual operations and eliminates the need to write and maintain custom scripts.

Further, configuring a secondary and/or recursive name server for DNSSEC can also be accomplished with a single click. The solution also automates important administrative functions including easy importing of trust anchors.

Infoblox Vice President of Architecture and DNS expert, Cricket Liu, commented: "Addressing the most threatening DNS security concerns requires a globally coordinated effort to deploy DNSSEC. The functionality Infoblox provides in its purpose-built, highly automated solutions helps organizations overcome deployment challenges by eliminating the complex tasks required to support DNSSEC with conventional solutions."

Pricing and Availability

The most comprehensive DNSSEC functionality is now available in Infoblox NIOS software version 5.0r1, the only core network services solution on the market with a single Web-based graphical user interface (GUI) that provides management of all aspects of the domain name system (DNS), IP address assignment (DHCP) and IP address management (IPAM) infrastructure and data.

The NIOS software version 5.0r1 will be available Dec. 21, 2009. Pricing for the solution on the Infoblox-250 appliance starts at $2,495 in the U.S. Software upgrades are available free of charge for all current customers with a valid maintenance contract.

For more information about Infoblox products, visit:

About Infoblox

Infoblox delivers highly reliable and manageable platforms for core network services like domain name resolution (DNS), IP address assignment (DHCP), IP address management (IPAM) and more. Infoblox solutions -- the only DNS, DHCP and IPAM (DDI) solution given a "Strong Positive Rating" by Gartner -- are used by over 3,500 organizations worldwide, including over 130 of the Fortune 500. The company is headquartered in Santa Clara, Calif., and operates in more than 30 countries.

Contact Information

  • Media Contacts:
    Jennifer Jasper
    Email Contact