Quarantine Compromised Devices andManage Network Security Zone Policy
with Infoblox and Tufin
Background and Challenges
Today’s enterprise networks consist of many separate network and security devices,each generating their own data about incidents and events. These tools are often poorlyintegrated. For network and security teams, the inability to share threat and asset data easily
and the lack of interoperability among tools creates solution silos. Those factors also limit
correlation of security data that can provide teams with vital context necessary to prioritize
events. The result: attacks that dwell longer within networks and delayed response times.
According to a recent industry report, keeping up with the volume of security alerts andintegrating security tools are the biggest challenges related to security operations. The same
survey notes that investing in technologies that automate security operations and threat
detection is a top priority for security teams today.

Benefits
With Infoblox and Tufin, enterprises can:Infoblox–Tufin Joint Solution
Tufin Orchestration Suite™ takes a policy-centric approach to cybersecurity. It provides
visibility across heterogeneous and hybrid IT environments and enables end-to-end change
automation for network and application connectivity. In addition, it enables security
organizations to easily orchestrate a unified policy baseline across multi-vendor andmulti-platform networks. Integration with Infoblox greatly simplifies the task of ensuring
adherence to security policy during dynamic network zone changes. Zone changes that
occur in Infoblox IPAM are automatically reflected in the related zones in Tufin’s network
segmentation connectivity matrix. As IPs and Security Groups are onboarded andoffboarded in Infoblox zones, the solution ensures that IT organizations can consistently
monitor adherence to corporate security policy models in Tufin. This approach leads togreater business continuity, improved business agility, reduced exposure to cybersecurity risk
and better awareness about the state of compliance.
An open and extensible platform, Tufin Orchestration Suite integrates with existing
technology and security investments for network security, cloud security, security operations,
incident response, vulnerability management, compliance, ticketing systems and more. By
automating the many complex tasks of ensuring policy compliance during network changes,
Tufin frees IT organizations to focus on their core competencies. In addition, it provides
an integrated ecosystem of security solutions that uses network data to generate relevant
intelligence and automate necessary changes to network connectivity.

Infoblox Ecosystem Exchange
An important component of the joint Infoblox-Tufin solution is Infoblox Ecosystem Exchange.
This highly connected set of integrations enables organizations to eliminate silos, automate
incident response, optimize security orchestration solutions and improve the ROI of their
entire cybersecurity ecosystems, including third-party, multi-vendor assets. It reduces the timeand costs to respond to threats through enhanced automation and real-time, two-way data
sharing enabled by extensive APIs.
www.tufin.com

1

Automate management ofsecurity zones• Infoblox automatically creates,
updates or removes networks andsubnets from security zones on Tufin• Using IP/DNS zones, Tufin
maintains security policies and helps
organizations achieve seamlessasset management
Quarantine/restrict access forcompromised devices• Infoblox shares information aboutcompromised assets with Tufin,
enabling enterprises to quarantine
or segment devices to prevent
access to sensitive resources orconnecting to the Internet
Improve ROI• Infoblox and Tufin increases the ROIof existing networking and security
tools and accelerates response
times to security events and networkchanges© Copyright 2022 Tufin. All rights reserved.

Tufin SecureTrack™ and Infoblox Integration
As part of the Tufin Orchestration Suite, SecureTrack provides a comprehensive security policy management solution for multi-vendor firewalls,
next-generation firewalls and cloud platforms (public, private and hybrid.) The integration of Tufin SecureTrack with Infoblox is based on theoutbound notification feature that sends automatic updates of network changes and real-time threat data to Tufin. The joint solution updates
security zones to reflect changes to the addresses within them or isolate compromised assets from accessing other zones (Fig 1).
Zones are dynamically updated and theUnified Security Policy identifies violations
Policy violations
notification and alerts

IPs and Security Groups
are on/offboarded
within zones in Infoblox
Infoblox updates zones
defined in SecureTrack
Blacklist/Blocked Group is updated to include
new malicious addresses

Figure 1. Infoblox and Tufin SecureTrack outbound notification integration.

Tufin automatically orchestrates policies across all enterprise devices so organizations can easily maintain security, remain compliant with industry
regulations and automate network changes, such as those involved in adding or removing network access. During network changes, Infoblox
keeps IP address management up to date by automatically synchronizing IP networks and sharing DNS security event data with Tufin SecureTrack(Fig. 2).

Figure 2. IP address synchronization between Infoblox and Tufin SecureTrack.

To learn more about how Tufin and Infoblox work together, visit tufin.com/partners/infoblox
About Tufin
Tufin (NYSE: TUFN) simplifies management of some of the largest, most complex networks in the world, consisting of thousands of firewall and network devices and emerging hybrid
cloud infrastructures. Enterprises select the company’s Tufin Orchestration Suite™ to increase agility in the face of ever-changing business demands while maintaining a robust security
posture. The Suite reduces the attack surface and meets the need for greater visibility into secure and reliable application connectivity. With over 2,000 customers since its inception,
Tufin’s network security automation enables enterprises to implement changes in minutes instead of days, while improving their security posture and business agility.

About Infoblox
Infoblox is leading the way to next-level DDI with its Secure, Cloud-Managed Network Services. Infoblox brings next-level simplicity, security, reliability and automation to on-premises,
cloud and hybrid networks, setting customers on a path to a single pane of glass for network management. Infoblox is a recognized leader with a 50 percent market share comprised of
8,000 customers, including 350 of the Fortune 500.

www.tufin.com
Copyright © All rights reserved. Tufin, Unified Security Policy, Tufin Orchestration Suite and Tufin logo are trademarks of Tufin. All other product names mentioned herein are trademarks
or registered trademarks of their respective owners. You may not copy, reproduce, photograph, translate, transmit ,make available to the public, make derivative works, perform in public,
rent , broadcast or make any commercial use of the publication in full and / or in part without prior written approval.
DP20220219