© 2007 Infoblox Inc. All Rights Reserved.

Infoblox DNS and DHCP AdvantagesInfoblox DNS and DHCP AdvantagesInfoblox DNS and DHCP AdvantagesInfoblox DNS and DHCP Advantages

LEX Computer Systems

© 2007 Infoblox Inc. All Rights Reserved.

Infoblox Advantages - General

Secure appliance platform– Easier to deploy on hostile networks (e.g., DMZs), more secure physically

Low cost of ownership– Ability to build distributed infrastructure without incurring high administrative cost

Built-in resiliency/disaster recovery features– Easy recovery of services after a catastrophe, elimination of ad hoc DR solutions

Support for VRRP-based high availability– Ability to use redundant HA pairs for critical servers

Easier and less frequent patching– Less administrative effort, less disruption of service

Unified GUI for management of DNS and DHCP– Exploits commonalities in configuration of two protocols, ensures consistency between their

configuration Platform-independent (Java-based) GUI

– Runs under any web browser, not just on Windows Global search

– Simplifies finding data in arbitrary zones or lease pools Recycle bin

– Allows easy recovery of accidentally deleted data

© 2007 Infoblox Inc. All Rights Reserved.

Infoblox Advantages - General (cont.)

Hierarchical configuration– Simplifies configuration of parameters common to most DNS servers or DHCP servers in an

organization IPAM functionality

– Ability to easily manage an organization’s entire address space Fine-grained authorization

– Ability to safely delegate management of zones and networks to help desk, operational personnel Audit logging

– Visibility into what administrators have done, when, and compliance with regulations (e.g., Sarbanes-Oxley)

– Extensive logging Built-in troubleshooting tools

– Easier troubleshooting of problems with a standard set of tools SNMP (MIB and trap) support

– Integration into existing SNMP-based monitoring systems Support organization deep in DNS and DHCP

– Highly skilled support staff accessible without multiple levels of escalation

© 2007 Infoblox Inc. All Rights Reserved.

Advantages of the Infoblox DNS Solution

Secure Dynamic Update support without a Domain Controller– Ability to separate DC and name server, thereby compartmentalizing risk and disentangling

maintenance schedules Support for member-based management and member-independent management

– Easier delegation of low-level data management to operations, help desk Support for query, recursive query and zone transfer ACLs

– Required on many Internet-accessible name servers (e.g., forwarders, external authoritative name servers)

Support for TSIG– Better security for zone transfers to and from remote name servers

Support for GSS-TSIG– Secure DDNS updates from Windows computers

Support for NS Groups– Much easier handling of en masse changes of authoritative name servers

Support for views– Ability to securely combine name server functions and to serve multiple versions of a single zone,

even across multiple name servers (unique to industry) Support for anycast

– Ability to build very resilient name server infrastructure Support for Zone Locking

– Allows operators to “own” the zone while making changes to avoid double edit issues Support for disabling zones and records

– Allows zone to be created but not activated or to be made inactive without deleting

© 2007 Infoblox Inc. All Rights Reserved.

Advantages of the Infoblox DNS Solution (cont.)

Support for Shared Records– Elimination of redundant administration when records appear in multiple zones

Support for incremental updates– Changes made in the GUI only result in IXFR to external (non-Infoblox) DNS servers

Support for sortlists– Configurable address responses to direct clients to the closest instance of a network resource

IPv6 support– AAAA records, dual IPv4/v6 stack

Extensively configurable logging– Ability to filter out nuisance messages, select critical messages

Support for syslog, including remote syslogging– Standard mechanism for logging across a network, works with third-party log analysis tools

Configurable host naming restrictions– Allows administrators to configure and enforce organization-specific host naming rules

Selection of authoritative name servers and forwarders based on roundtrip time– Better name server performance and greater resilience in the face of network and component

failures Credibility mechanism for protection against cache poisoning

– Better resistance to pharming attacks

© 2007 Infoblox Inc. All Rights Reserved.

Advantages of the Infoblox DHCP Solution

Support for DHCP Failover– More resilient DHCP service

Lease history– Ability to track history of address assignment, possibly for compliance

Easier configuration of custom DHCP options– Easier support for VoIP phones

Support for filtering (based on MAC address, relay agent, option)– Ability to restrict leases to only known clients

Templates for easy duplication of common network configurations– Streamlines creation of new DHCP ranges

Support for joining/splitting networks– Easier reconfiguration when network changes

Easier and more complete access to DHCP statistics– Better visibility of state of network, easier detection of range exhaustion

Support for member-based management and member-independent management– True global management, without being forced to remember which DHCP server serves a

particular range

© 2007 Infoblox Inc. All Rights Reserved.

Advantages of the Infoblox DHCP Solution (cont’d)

– Support for converting dynamic leases to static and back Streamlines common administrative tasks

– Name collision detection Elimination of inadvertent deletion of important domain names

– More flexible handling of dynamic updates More options when choosing how DHCP clients are registered

– Detection of overlapping ranges Elimination of potentially disruptive configuration mistakes