Feature and Enhancement:

BloxOne DDI supports the ability to create HA groups over Anycast.

BloxOne DDI now supports the ability to configure HA Groups that utilize the BloxOne Anycast service.  A DHCP Anycast HA Group is an Active/Active pair of on-prem hosts that share a virtual IP address (VIP) for DHCP protocol communications, acting from the clients’ perspective, as “one” DHCP server.  The VIP is advertised using the BloxOne Anycast service, which leverages either OSPFv2, OSPFv3, or BGP to announce reachability.  For more information, see High Availability for DHCP and Creating HA Groups.

You can configure BloxOne DDI to send DHCP DDNS Updates to Microsoft DNS Servers using GSS-TSIG.

Building on the existing ability to receive GSS-TSIG DDNS updates, BloxOne DDI can now send GSS-TSIG authenticated DDNS updates to Microsoft DNS servers.  DDNS updates are used to dynamically update DNS data, based on DHCP client information. For more information, see Enabling DDNS for IPv4 Clients.

BloxOne DDI lifts DHCP lease limits for on-prem hosts.

BloxOne DDI on-prem hosts (or HA pairs) running DHCP are no longer limited to 25,000 leases each.  Now, each on-prem host (or HA pair) can support an unrestricted number of leases, based on the locally available resources.  

BloxOne supports deploying on-prem hosts in Amazon AWS.

You can now deploy BloxOne DDI on on-prem hosts in AWS using Infoblox-provided Community or Public BloxOne AMI images. For more information, see Deploying Hosts Using AMI in AWS.

You can view the status of long-running tasks.

BloxOne DDI provides the ability to view tasks that run in the background. You can view the entire list of tasks, clear the task from the list, or edit the tasks. For more information, see Viewing Background Tasks.

Ability to sync Microsoft zones and DHCP exclusion ranges from NIOS to the Cloud Services Portal.

NIOS Grid Connector allows you to import Microsoft-managed zones and DHCP exclusion range from NIOS to the Cloud Services Portal. For more information, see Configuring NIOS Grid Connector.

You can include client IP address, MAC address, and DNS view the information in outgoing DNS queries.

Include the client IP address, MAC address, and DNS view information of the client from which the DNS query was initiated, to outgoing recursive queries. For more information, see User Forwarders. 

BloxOne DDI now supports conflict resolution for DHCP with multiple options.

Conflict resolution ensures that the DNS record's information associated with one DHCP client is not updated by other DHCP clients. For more information, see Enabling DDNS for IPv4 Clients.

Overall DDI Dashboard Performance enhancements

Widgets on the DDI dashboard have been enhanced to improve overall performance with significantly improved result response time. Additionally, all graph time indexes are now standardized to UTC.

BloxOne DDI enhances on-prem host selection for DHCP HA Groups.

Search results are now repaginated to simplify on-prem host selection when creating and managing DHCP/DNS config profiles, DHCP HA Groups, and Subnets.

BloxOne expands the ability for you to specify custom templates for webhook notifications.

You can now integrate your notification platforms by specifying custom templates for webhook notifications. You can specify any number of webhooks and their associated templates and specify the notification types they will be used for. For information, see Configuring Service Integrations.

BloxOne Endpoint
BloxOne Threat Defense
Data Exchange (TIDE)

BloxOne Endpoint enhancements:

You may now implement security policies based on user groups with supported SaaS IdP (Identity Provider) which currently includes Okta and OpenAM.

A policy provisioned for a BloxOne Endpoint Group will be applied before a user is authenticated. Once a user is authenticated, it will be possible for the user to browse the Internet or other restricted content as allowed by the policy. For more information, see BloxOne Endpoint SSO Authentication.

The BloxOne Endpoint is available for deployment on Chrome OS version 90 and above.

 BloxOne Endpoint is available on the following platforms: Microsoft Windows, MacOS, iOS, Android, and Chrome OS. Note that Android and Chrome devices should be managed by Google Admin Console. For more information, see Mobile Endpoint Management.

Scheduling and/or deferring upgrades per endpoint group.

It is now possible to evaluate new features and enhancements in a test group before rolling out the upgrade to the entire company. You may also postpone the upgrade to a more convenient date/time per endpoint group. For more information, see Scheduling Endpoint Group Updates.

Netskope client compatibility with BloxOne Endpont.

BloxOne Endpoint is officially certified to run with Netskope client 93.0.1, provided that you disable "Bypass Loopback DNS feature flag" on Netskope. For more information, see Endpoint Compatibility Guidelines. 

Policy management enhancements:

User authentication and group-based policies with on-prem Microsoft Active Directory for DNS Forwarding Proxy (DFP).

In addition to SaaS IdP providers Okta, OpenAM, Microsoft Azure Active Directory, it is now possible to authenticate users on on-prem Microsoft Active Directory. This service is supported for standalone DFP (deployed in a VM or as a container) or running with BloxOne DDI services. For more information, see Configuring Microsoft Windows Active Directory Sync for On-Prem Hosts. 

Access authentication exceptions based on subnets or individual IP addresses.

To allow non-authenticated access for IoT and infrastructure devices to the same DFP infrastructure used by other users, you can now define exceptions based on subnets or individual IP addresses. For more information, see Configuring Access Authentication Profiles for On-Prem Hosts.

Support for safe search enforcement.

DNS category filtration provides good protection against explicit content, but search engines themselves can provide access to restricted content. For compliance reasons, or simply to prevent juveniles or other users access to such content, search engines provide "safe" versions of their search engines, which filter out inappropriate results. To help enforce the policy for all devices, this new policy feature can automatically redirect users to a safe version of the supported search engines. This feature currently supports the following search engines: Google Search, Bing, Youtube, and Yandex. For more information, see Safe Search Enforcement.

Local DNS request processing optimization.

To reduce the number of noise requests forwarded to the cloud and to avoid misconfiguration, DFP and BloxOne Endpoint will automatically forward all PTR requests for any private subnets (e.g. 10.0.0.0/8, 192.168.0.0/16, etc.) to local DNS servers. With this enhancement, you will not need to list such subnets in the internal domains or custom allow lists. For more information, see Forwarding DNS Traffic to BloxOne Threat Defense Cloud. 

BloxOne Threat Defense RESTful API updates.

• dns_event API endpoint is refined to support the following capabilities:
• Filtering by: feed/custom list name, feed/custom list type, domain category, application, endpoint name, user group, on-prem host name, client's subnet/IP, threat class, threat property, threat indicator, DNS view for NIOS logs.
• Additional metadata in response: username, user group, application, feed/custom list name, feed/custom list type, domain category.
• Additional REST API enhancements: 
• Substring match support
• Managing individual entries in the list of internal domains
• Response pagination for custom lists

For more information, see DNS Event and BloxOne Threat Defense API Guide.

Infoblox introduces a new NTP service for all BloxOne Threat Defense Business Cloud and Advanced customers to reduce dependency on third-party services and to ensure that a common time source is used for all devices, .

The NTP service can be deployed standalone, or along with DNS Forwarding Proxy or other services on on-prem hosts. You can configure the NTP service uniformly across the account with the possibility of overriding locally on the host wherever NTP service is deployed. The service supports detailed configuration, including authentication, specific attributes, and access control lists. For more information, see Configuring NTP Service.

Dossier and TIDE enhancements:

Bring Your Own Feed (BYOF) – A new method to create RPZ feeds from TIDE Custom Profiles. 

You can now define an RPZ name during the creation of a TIDE profile to have it automatically create an RPZ file from data uploaded to TIDE. Users who have access to other third-party data sources shared with TIDE can better utilize these feeds using the DNS firewall or when sharing threat intel to other solutions in the security stack. For more information, see TIDE Data Submission on the Cloud Services Platform.

Enhancement: The point of presence (PoP) in South Africa has been updated to enhance BloxOne services and DNS performance.

Enhancement: 

• You can view upcoming release announcements on the Cloud Services Portal home page. Information on future BloxOne features and products will now be announced on the Cloud Services Portal. The new section is called “Upcoming Releases,” noting what is coming and the estimated release date. You may also opt to receive in-app or email notifications of upcoming releases by visiting the Notification Settings page . For more information, see Configuring Notification Delivery.
• Infoblox BloxOne extends log exports to now include DHCP logs, DNS logs, and Security logs to your dedicated Amazon S3 bucket. For more information, see Exporting Logs.

Feature: 

• You can deploy on-prem hosts in AWS using Infoblox-provided Community or Public BloxOne AMI images. For more information, see Deploying Hosts Using AMI in AWS.
• You can filter on-prem hosts deployed in AWS by "BloxOne VM - AWS” on the On-Prem Host page of the Cloud Services Portal. For more information, see Viewing On-Prem Host Status.

For more information, see Configuring Notification Delivery.

• False positive and false negative threat data. 
• Incorrect web category information.
• Incorrect lookalike detection information.
• Incorrect application detection information.

For more information, see Dossier Threat Research Feedback.

• Sends additional DHCP-enriched logs, including certain metadata and field names, to all applicable destinations in CEF/LEEF log format.
• Provides the hostname and device name as part of the syslog messages. 

For more information, see Configuring Traffic Flows.

Enhancement: The BloxOne DDI DNS container v3.1.6 addresses the following vulnerabilities: CVE-2022-0396 and CVE-2021-25220.

• CVE-2022-0396: When BIND is configured to disable processing of TCP queries in parallel (option "keep-response-order”),  it consumed TCP connection slots indefinitely via a specifically crafted TCP stream sent by a client.
• CVE-2021-25220: An issue in BIND affects some resolvers configured with certain forms of forwarding. Out-of-bailiwick NS records in crafted responses, for example, sent by a malicious forwarder, may be cached under certain circumstances and potentially used for subsequent recursion.

Enhancement: BloxOne endpoints are no longer displayed in the Cloud Services Portal once they are moved to the recycle bin.

• Statistics reported in the details pane of the Endpoints page no longer include deleted endpoints. 

• Endpoints restored from the recycle bin are assigned disabled status by default.

• When an endpoint group is deleted, all endpoints residing within the deleted group are moved to the default endpoint group.

• When restoring a deleted endpoint from a deleted endpoint group, the restored endpoint remains a member of the default endpoint group. 

For more information, see Endpoint Management.

Enhancement: DNS objects, such as DNS views, authoritative zones, forward zones, access control lists, and others are now supported in Global Search. This expands the set of available objects and tags to quickly find and take actions on hosts, devices, and users throughout the enterprise. For more information, see Using Global Search.

Feature and Enhancement:

• BloxOne Endpoint supports the following endpoint clients: Akamai Enterprise Applications Access (EAA) VPN client and Zscaler Client Connector with VPN client. For more information, see Endpoint Compatibility Guidelines.
• BloxOne Endpoint supports the following operating systems: Windows 11 and macOS Monterey. For more information, see Supported Browsers and Operating Systems.
• BloxOne Mobile Endpoint Management has the following enhancements: allows sending log files directly to the Cloud, multiple Anycast support, reestablishment of endpoint protection. For more information, see Mobile Endpoint Management.
• To simplify management of security policies, you can now create and modify many objects inline, including custom lists, category filters, and endpoint groups. For more information, see Configuring Security Policies.
• BloxOne Threat Defense now supports several new objects for data import and export. For more information, see Importing and Exporting Data.
• Data Connector now sends DHCP enriched logs, including certain metadata and field names, to all applicable destinations in CEF/LEEF log format.  For more information, see Configuring Traffic Flows.

Enhancement:

• Infoblox supports the deployment of on-prem hosts in KVM-hypervisor-based deployments. You can now deploy on-prem hosts through KVM-hypervisor-based virtual appliances, using Infoblox-provided QCOW2 packages you download from the Cloud Services Portal. For information, see Bare-metal KVM Deployment and OpenStack with KVM Hypervisor Deployment.
• BloxOne now provides high-capacity Microsoft Azure VHD packages for deploying on-prem hosts. Depending on your business requirements, BloxOne now supports high-capacity Microsoft Azure VHD installation packages you download from the Cloud Services Portal. For information, see Downloading BloxOne Apps.
• Infoblox supports the deployment of on-prem hosts on DELL 1425 and 1485 VEP hardware. You can now deploy on-prem hosts on DELL VEP hardware, using Infoblox-provided ISO packages you download from the Cloud Services Portal while creating on-prem hosts using the serial number option. For information, see Hardware Appliance Deployment.
• The Device UI provides additional information to improve troubleshooting during on-prem host deployments. The Device UI provides additional information about the accuracy of the "join token" that you have entered via the Device UI or via cloud-init values, and the serial number that you have entered via the Cloud Services Portal. For information, see Troubleshooting On-Prem Hosts.

Enhancement: Infoblox Data Connector now supports sending logs from BloxOne and NIOS sources to a Splunk Cloud destination in Splunk CIM or legacy Infoblox data format. For more information, see Configuring Traffic Flows.

BloxOne Threat Defense

Enhancement: Depreciation of the ActiveTrust Platform.

Infoblox replaced the ActiveTrust platform three years ago with the introduction of BloxOne Threat Defense built on the Cloud Service Platform, a modern and scalable platform built for a future of dynamic cloud-native security and networking solutions. Most customers have already migrated but there may still be a few using legacy connectors. Please ensure any use of the legacy system at (platform.activetrust.net) has been moved to the new cloud services portal (csp.infoblox.com). For developer resources please visit the TIDE and DOSSIER guide for CSP, and If you have any additional questions, please contact Infoblox Support at 888-463-6259.

Enhancement: The Security Activity Report permanently replaces the former Security Report.

Since the release of the new Security Activity Report to Infoblox Threat Defense about a year ago, the former Security Report has been retained to ease with the transition. As newer reporting capabilities have been added to the new Security Activity Report, dependence on the older report has declined and it is time to remove it.

There is no action required on your part as the former Security Report will be removed from the Cloud Services Platform menu after December 17, 2021.

Enhancement:

• Support the ability to configure DHCP server to ignore UID (Unique Client Identifier) when issuing IPv4 DHCP leases and identify DHCP clients solely based on their MAC address. For more information, see Defining Lease Times.
• New standard option codes 78, 79, 94, 146, 159, and 212 are now available in the DHCP4 option space. While these options have a record-based format, they are input as hex values and their format is partially validated. For more information, see DHCP Option Data Types.
• New System Defined DHCPv4 fingerprints are available for additional device classes and with new option number sequences. For example, new option number sequences are available for Microsoft Windows Kernel 4.0 system and Apple iOS and Mac OS X. For more information, see Configuring DHCPv4 Fingerprints.

Maintenance: The BloxOne DDI DNS container v3.1.4 addresses the following vulnerability: CVE-2021-25219. For more information, see What's New in BloxOne DDI.

Enhancement:

• BloxOne introduces new status and message for initial deployment of non-NIOS on-prem hosts.  When deploying a non-NIOS on-prem host, you can now view its initial deployment status and message in the Platform Management section of the Manage -> On-Prem Host page of the Cloud Services Portal. For more information, see Viewing On-Prem Host Status.
• Data Connector sends additional enriched data fields for Threat Defense Query/Response and Threat Feeds Hits logs to all applicable destinations. For more information, see Configuring Traffic Flows.
• BloxOne adds support for VMware ESXi server versions 6.7 and 7.0 for on-prem host deployment. For more information, see Supported Platforms for On-Prem Hosts.

BloxOne Cloud Services Portal
BloxOne DNS
BloxOne DHCP

Feature:

• Ansible is now supported to automate DNS, DHCP and IPAM operations. Modules and sample playbooks are available on the Infoblox GitHub page at https://github.com/infobloxopen/bloxone-ansible. For more information, see Ansible Collections for BloxOne DDI.
• DNS IPv6 resource records are now supported in all DNS zones, providing support for dual-stack (IPv4/IPv6) applications and clients. For more information, see Creating a Primary Zone.
• DHCP objects, such as MAC addresses, networks, and host names, are now supported in Global Search. This expands the set of objects and tags available to quickly find and take action on hosts, devices, and users throughout the enterprise. For more information, see Using Global Search.
• BloxOne DDI now explicitly updates secondary DNS servers when DNS records are changed. This enables timely synchronization of zones for global DNS deployments. For more information, see Creating a Primary Zone.
• BloxOne DDI now supports the next-server, server-hostname, and bootp-file-name fields, as well as DHCP options 124 and 125. For more information, see Configuring DHCP Options.
• BloxOne DDI offers an easy method for you to migrate DHCP networks from NIOS to BloxOne. With this change, the DHCP options associated with IP space can optionally be preserved. For more information, see Copying IP Spaces.

Enhancement:

• The Cloud Services Portal now displays the previous Address/Name column of a subnet in the Address Block tab as two columns: Address and Name. This change does not affect functionality. For more information, see Configuring Subnets.

BloxOne Cloud Services Portal
BloxOne Threat Defense
BloxOne Endpoint

Feature:

• This BloxOne release introduces mobile endpoint management for iOS and Android devices. For more information, see Mobile Endpoint Management.
• BloxOne Endpoint supports the automatic removal of regular and mobile endpoints. For more information, see Automatic Removal of an Endpoint After a Period of Inactivity.
• BloxOne Endpoint provides endpoint password protection against unauthorized interference. For more information, see Creating Endpoint Groups.
• This BloxOne Threat Defense release provides the ability to move objects to the Recycle Bin and restore the objects as required. For more information, see Recycle Bin.
• BloxOne Endpoint now supports enabling and disabling endpoints by endpoint group. For more information, see Enabling and Disabling Endpoints by Group.
• You can now easily reorder security policy precedence using drag-and-drop functionality. For more information, see Creating Security Policies.
• This BloxOne Threat Defense release now supports click-through capability for dashboard widgets. For more information, see Viewing the Dashboard.

Enhancement:

• Dossier  enhances threat investigation through threat scoring and deeper integration with Security Activity reports. For more information, see Infoblox TIDE and Dossier Guides for the Cloud Services Portal.
• This release includes BloxOne Threat Defense reporting enhancements for the Cloud Services Portal. For more information, see Viewing Reports.

Feature: 

• Data import/export now supports the CSV file format in addition to JSON. For more information, see Importing and Exporting Data.
• Infoblox now provides a software image to simplify the deployment of BloxOne on-prem hosts in Microsoft Azure Cloud. For more information, see Microsoft Azure Deployment.
• This release consists of DNS and DHCP service updates that will be applied to on-prem hosts running BloxOne DDI DNS and DHCP services.  

BloxOne Cloud Services Portal
BloxOne DNS
BloxOne DHCP
SSO Portal

Feature:

• The Infoblox SSO Portal now supports single IdP authentication for multiple domains. For more information, see Configuring IdP Authentication.
• Infoblox supports the deployment of on-prem hosts in Microsoft Azure.For more information, see Microsoft Azure Deployment.
• You can download service logs using the BloxOne API. For more information, see https://csp.infoblox.com/apidoc.

Enhancement:

• The former on-prem host type "BloxOne OVA" is now displayed as "BloxOne VM" on the Cloud Services Portal.For more information, see Viewing On-Prem Host Status.
• This BloxOne release adds sub types to these on-prem host types: "BloxOne Appliance" and "BloxOne VM."For more information, see Viewing On-Prem Host Status.
• BloxOne now provides high-capacity OVA packages for deploying on-prem hosts. For information, see Downloading BloxOne Apps.
• Data Connector supports sending log messages in Common Information Model (CIM) format when you configure Splunk as the destination. For information, see Setting Up Splunk.

Feature: Support for customer-provided Identity Providers using the standard SAML 2.0 interface. For more information, see What's New in BloxOne Threat Defense and What's New in BloxOne DDI

BloxOne Cloud Services Portal

BloxOne DNS
BloxOne DHCP

BloxOne Endpoint

BloxOne DNS
BloxOne DHCP

BloxOne DNS
BloxOne DHCP
BloxOne Ecosystem (CDC)

BloxOne DNS
BloxOne DHCP