Contact Information: Media Contacts: Jennifer Jasper Infoblox 408.625.4309
Infoblox Delivers the Industry's Most Automated DNSSEC Solution
Fully Automated Key Management and Rollover Eliminates Barriers to DNSSEC Adoption
| Quelle: Infoblox
SANTA CLARA, CA--(Marketwire - December 14, 2009) - Infoblox Inc. today announced availability
of additional functionality to help organizations simplify deployment of
the Domain Name System Security Extensions (DNSSEC), a suite of IETF
specifications for securing information provided by DNS.
Many security researchers are expressing growing alarm over the state of
DNS security. Security researcher Dan Kaminsky, Director of Penetration
Testing at IO Active who exposed the "Kaminsky DNS vulnerability" and is
advocating implementation of DNSSEC, commented: "The lack of DNS security
not only makes the Internet vulnerable, but is also crippling the
scalability of important security technologies. DNSSEC offers the most
feasible solution to a serious threat."
And, underscoring the importance of DNS security and DNSSEC, implementation
of DNSSEC is mandated for U.S. Federal government agencies by the end of
December 2009.
However, DNSSEC adoption until recently has been slow, hampered by concerns
over the operational complexity associated with provisioning and
distributing encryption keys and the overhead required to digitally sign
DNS information. Implementing DNSSEC using DNS freeware or general-purpose
operating systems requires the execution of numerous, time consuming and
error prone steps each time DNS data are added or modified.
Infoblox addresses this with its "one-click DNSSEC" solution
that replaces manual key generation and zone signing with a one-click
process that generates and securely distributes encryption keys to all
appliances in the Infoblox grid that serve DNSSEC data. Infoblox also
automates the critical process of periodically changing keys, also known as
"key rollover," which is essential to ensuring that secure DNS data cannot
be compromised. Keys are rolled over automatically according to best
practices recommended by the National Institute of Standards and Technology
(NIST-800-81) and RFC 4641 standards. DNSSEC records are signed and
re-signed automatically each time DNS data are changed. This eliminates
dozens of error-prone, manual operations and eliminates the need to write
and maintain custom scripts.
Further, configuring a secondary and/or recursive name server for DNSSEC
can also be accomplished with a single click. The solution also automates
important administrative functions including easy importing of trust
anchors.
Infoblox Vice President of Architecture and DNS expert, Cricket Liu,
commented: "Addressing the most threatening DNS security concerns requires
a globally coordinated effort to deploy DNSSEC. The functionality Infoblox
provides in its purpose-built, highly automated solutions helps
organizations overcome deployment challenges by eliminating the complex
tasks required to support DNSSEC with conventional solutions."
Pricing and Availability
The most comprehensive DNSSEC functionality is now available in Infoblox
NIOS software version 5.0r1, the only core network services solution on the
market with a single Web-based graphical user interface (GUI) that provides
management of all aspects of the domain name system (DNS), IP address
assignment (DHCP) and IP address management (IPAM) infrastructure and data.
The NIOS software version 5.0r1 will be available Dec. 21, 2009. Pricing
for the solution on the Infoblox-250 appliance starts at $2,495 in the U.S.
Software upgrades are available free of charge for all current customers
with a valid maintenance contract.
For more information about Infoblox products, visit:
http://www.infoblox.com/products/.
About Infoblox
Infoblox delivers highly reliable and manageable platforms for core network
services like domain name resolution (DNS), IP address assignment (DHCP),
IP address management (IPAM) and more. Infoblox solutions -- the only DNS,
DHCP and IPAM (DDI) solution given a "Strong Positive Rating" by Gartner --
are used by over 3,500 organizations worldwide, including over 130 of the
Fortune 500. The company is headquartered in Santa Clara, Calif., and
operates in more than 30 countries.