Infoblox ThreatTalk

Don’t be stuck in the IT stone age!  The castle walls of defense in depth are down or at least damaged due to a combination of constant attack and the digital transformation. The digital transformation constantly moves data away from traditional enterprise control: Rapid expansion of SaaS Applications hosted everywhere Branch offices on SDWANs Explosion of IoT Teleworkers logging in from unsecured locations Michael Zuckerman joins ThreatTalk to discuss how adopting a robust framework like ISO27001 and ISO27002 can provide a roadmap to taking the initiative back from the attackers.  The ISO standards provide key policies and procedures that inform the actions to be taken in advance or in response to an attack. DNS security products provide the extended visibility necessary to implement ISO frameworks beyond the network by encompassing cloud resources and remote users.  Combined with NAC devices, DNS security provides foundational security to detect, block, and quarantine infected machines and return control to the enterprise.

Most organizations think DNS security means that they must secure their various DNS systems.  However, using DNS security strategically overlays an overarching layer of security capabilities across the enterprise. When harnessing DNS security, an organization can: Bypass the need to configure of hundreds or thousands of firewalls to block specific addresses or websites.   Secure remote users without VPN overhead.   Control access for cloud resources, datacenters, and containers with a single, simple unifying policy.   Detect infrastructure attacks early in the Mitre Framework stages before data exfiltration or command and control attacks can begin Michael Katz joins ThreatTalk to discuss how DNS enhances the capabilities of firewalls by taking a broader look at the traffic within an organization.  They discuss three key strategies to implementing DNS and cover key DNS mistakes most organizations make when developing their security strategies.

How can an enterprise protect a surge of remote users? Everyone is scrambling to deal with the consequences of the COVID19 quarantine.  Enterprises suddenly shifted their employees from primarily within the office to primarily working from home.  Now security managers must somehow extend the corporate security stack to non-technical employees working on home networks. Krupa Srivatsan, Director of Product Marketing at Infoblox, joins ThreatTalk to cover 5 key threats for the remote worker. With so many threats, an enterprise security team needs to respond quickly and efficiently.  The best way to do that is to focus on the common denominator: everything uses DNS.   Srivatsan explains how cloud-based DNS with analytics allows an enterprise to remotely protect the employee.  Security managers can restrict the remote worker to safe domains, protect against data exfiltration, and limit command and control commands from already-infected devices.   You can find this interview, and many more, by subscribing to the ThreatTalk podcast on Apple Podcasts or on Spotify.

How can a heralded new feature from Firefox be dangerous? When the consumer-protecting DNS over HTTPS (DoH) feature creates a default that dangerously bypasses enterprise security and exposes organizations to serious risks. Krupa Srivastan, Director of Product Marketing at Infoblox, discusses key issues with DoH and best practices to regain control of the DNS traffic to protect the enterprise environment.

The EVP Engineering and Chief DNS Architect at Infoblox, Cricket Liu, joins us on Threat Talk to talk about DNS Flag Days – why we need them and how they are improving the internet.  DNS Flag Days serve notices to obsolete Domain Name System (DNS) servers that existing accommodations to provide them with compatibility for pre-1999 standards will be phased out.  The Flag Days attempt to: Speed up DNS Improve DNS reliability Improve DNS security In 1999, DNS was extended with eDNS(0), yet servers incompatible with eDNS(0) continue to be used today.  To improve the performance of the internet, the 2019 DNS flag day temporarily ceased to support those legacy DNS servers. The 2020 Flag Day will tackle the maximum DNS message size to bring them down under 1232 bytes.  This will stop DNS message fragmentation and improve both the reliability and security of DNS. You can find this interview, and many more, by subscribing to the ThreatTalk podcast on Apple Podcasts or on Spotify.

How can anyone manage their security when so much is literally out of their control within a 3rd party SaaS or BYOD?  A breach is going to happen so limit the impact using Zero Trust principles:  Focus on the Data Trust no user  Trust no communication Deny access by default and provide minimal access when required   Consulting Senior Product Marketing Manager at Infoblox, Michael Zuckerman, joins Threat Talk to discuss Zero Trust in detail.  Designed with Data at the heart of the protection strategy, Zero Trust uses fundamental IT technology such as DNS filtering, encryption and microsegmentation as key components to control access and limit exposure. You can find this interview, and many more, by subscribing to the ThreatTalk podcast on Apple Podcasts or on Spotify.

Did you know that over 90% of the malware incidents and over half of all ransomware and data theft attacks rely on DNS as a vector. In today’s day and age, securing your DNS has never been more critical. Today we’re joined by David Ayers, a member of the Infoblox product marketing team, who is responsible for service provider and DNS privacy messaging. David fills us in on biggest security concerns and how to secure your DNS infrastructure. To listen to this episode and many more like it, subscribe to ThreatTalk on Apple Podcasts or tune in on our website.

Objectivity in cyber defense is the goal, but, too often, emotion of the room rules the day. In this episode, seasoned IT expert Michael Zuckerberg joins us to explain the MITRE ATT&CK framework and how to utilize it to reduce subjectivity and increase your cyber defense systems. Michael is a consulting senior product marketing manager at Infoblox, an expert consultant in B2B product marketing and marketing strategy, with experience in cybersecurity and enterprise SaaS software markets. He has extensive domain experience in all facets of cybersecurity. What we talked about: MITRE ATT&CK framework Explain high-level tactics versus techniques How to use the MITRE ATT&CK framework as a matrix Reducing subjectivity and increasing objectivity in cyber defense Addressing cyber risks Identifying priorities   You can find this interview, and many more, by subscribing to the ThreatTalk podcast on Apple Podcasts or on Spotify.

“Your employer’s firewall has blocked access to this website.” That’s a good way to protect a network. But its a bad way to cost effectively protect your network. There’s a better way, using DNS, which costs far less, and it’s extremely accurate.   On this episode, Director of Product Marketing at Infoblox, Krupa Srivatsan, discusses how DNS can be utilized to protect your network.   What we talked about: Content filtering at the DNS level Blocking objectionable material DNS vs firewall protection   You can find this interview, and many more, by subscribing to the ThreatTalk podcast on Apple Podcasts or on Spotify.

DNS, DHCP, IPAM — most people within IT understand how these ensure connectivity. But they can, and should, also be leveraged as the major defenses for your network.   On this episode of the ThreatTalk podcast, Krupa Srivatsan joined us to discuss the security defense methodologies inherent within DHS, DHCP, & IPAM.   Krupa is the Director of Product Marketing at Infoblox. She has an MBA from Berkeley, and has worked with Pfizer, Agilent, Cisco Systems, and others.   What we talked about: DNS, DHCP, & IPAM IOT Network Insights — key feature of Infoblox’s security system NetMRI NIST core functions Improving branch officer experience Multi Cloud   You can find this interview, and many more, by subscribing to the ThreatTalk podcast on Apple Podcasts or on Spotify.