Infoblox integrates threat rules into AWS Network Firewall

"The managed rules consist of pre-compiled groups of rules that use AWS Network Firewall to block connections to suspicious or known malicious domains. By automatically updating the rule sets, most of the manual maintenance normally associated with firewall configuration is eliminated. Infoblox claims that this significantly reduces the operational burden on security teams. Another argument put forward by Infoblox is that the approach responds to a growing dependence on DNS by attackers. DNS is widely used for phishing, command-and-control, and data exfiltration."

"According to Infoblox, attackers are responding faster and faster. They are increasingly using automation and AI to bypass security layers. The company claims that DNS traffic is an early indicator of malicious activity and that predictive threat intelligence helps organizations stop threats before they have an impact. Infoblox states that its threat intelligence picks up signals dozens of days earlier than traditional solutions on average."

Infoblox introduces a DNS-based security integration for AWS Network Firewall, available through the AWS Marketplace. The solution manages pre-compiled rule sets directly from the AWS environment and connects to existing cloud infrastructure without installing additional components. Managed rules automatically update to block connections to suspicious or known malicious domains, reducing manual firewall maintenance and operational burden on security teams. The approach leverages DNS as an early indicator of phishing, command-and-control, and data exfiltration, providing visibility into domain communication via AWS logging and alerting. Predictive threat intelligence reportedly detects malicious signals dozens of days earlier on average. Launch begins as a Limited Preview.

Read at Techzine Global