In October last year, McAfee teamed up with network control provider Infoblox to combine web and Domain Name System (DNS) security as part of an effort to help beef up the security of customer networks. That partnership is meant to provide unified protection and faster incident response solution to customers through shared threat intelligence and security event data.
Today, Infoblox has announced that the two companies have enhanced that partnership to offer DNS and web security, data sharing, and security orchestration to customers. The improved alliance aims to heighten the level of threat intelligence and accelerate the response time needed to counter cyber threats.
DJ Long, head of McAfee Security Innovation Alliance, notes in a blog post that the lack of ability to share data or threat intelligence across security solutions hinders organizations from responding to the growing threat landscape. He went on to say:
The integration between McAfee and Infoblox enriches an organization’s ability to provide protection for non-web protocols via DNS, while improving the visibility into web traffic and enabling customers to share threat indicator for faster and more effective response.
The integrated solution uses a mix of behavioral analytics, machine learning, and real-time threat intelligence at the DNS layer to recognize infected devices and prevent the DNS-based extraction of data. The tool then diverts suspicious traffic from those devices to the McAfee Web Gateway Cloud Services, where the content in question will be thoroughly scanned for potential malware and SSL infection.
Organizations will also be able to view DNS security incidents, unify security tools, and provide a quick remedy by sharing threat indicators and intelligence between the Infoblox ActiveTrust suite and the McAfee Data Exchange Layer.
Source and Image: Infoblox