Integration of Carbon Black and Infoblox DNS Firewall is first-of-its-kind for ETDR and DNS security solutions
WALTHAM, Mass.—July 30, 2015—Bit9® + Carbon Black®, the leader in endpoint threat prevention, detection and response, today announced that Infoblox Inc., the network control company, has joined the “Bit9 + Carbon Black Connect” Alliance Partner Program.
Bit9 + Carbon Black has built an integration with Infoblox that will enable organizations to bring alerts from Infoblox DNS Firewall on malicious DNS communications to Carbon Black’s continuous endpoint recorder. This enables security teams to automatically identify and take action against infected endpoints, whether they are inside or outside the corporate network.
The integration creates two unique and powerful use cases:
- Data correlation between DNS queries and endpoints: When a DNS query to a malicious domain destination is detected by Infoblox DNS Firewall, it sends an alert to Carbon Black where the information is correlated against Carbon Black’s real-time endpoint data to instantly identify all infected endpoints and processes connecting to that malicious domain. Once identified, an organization can either automatically or on-demand kill any malicious processes running on those endpoints. An organization can then use Carbon Black to institute a process ban, preventing those malicious processes from running again anywhere in the organization’s environment.
- Better coverage of off-network endpoints: When an endpoint is outside the corporate network, Carbon Black extends Infoblox DNS Firewall protection to that endpoint by automatically terminating any processes known to be connecting to a malicious domain.
The benefit of this integration is that organizations are able to better detect malware activity via DNS, dramatically reduce the time to respond to threats, and quickly remediate threats at the endpoint.
“As cyber attacks increase in quantity and sophistication, cyber security has become a top priority for CIOs,” said Craig Sanderson, senior director for security products at Infoblox. “To enhance their protection, organizations should unify network and endpoint security to provide ‘closed-loop’ protection. DNS security plays a critical role in defending against advanced persistent threats (APTs) and malware. This integration will help to vastly improve an organization’s security posture.”
“This integration will help enable organizations to connect endpoint threat detection and response information with DNS firewall data,” said Brain Hazzard, Bit9 + Carbon Black’s vice president of technical alliances. “As a result, organizations can detect and stop advanced threats in real-time, on or off network; prevent endpoint communications to command and control servers and botnets; and automatically respond to endpoint threats.”
About the “Bit9 + Carbon Black Connect” Alliance Partner Program
The “Bit9 + Carbon Black Connect” Alliance Partner Program integrates the leading endpoint and server security solution from Bit9 + Carbon Black with solutions from top companies in four categories:
- Incident response
- Managed security services
- Threat intelligence
- Network security, analytics and SIEM
This enables enterprises to create a unified defense against cyber threats. Enterprises that deploy the Bit9 Security Platform and/or Carbon Black with certified alliance partners’ offerings experience a fully integrated strengthening of their security posture, a decrease in their total cost of ownership, achievement of faster deployment times, and gain increased value from their integrated solutions.
Availability
This integration is available free of charge from Bit9 + Carbon Black for customers using Carbon Black version 5.0 and above and Infoblox DNS Firewall version 7.0 and above. The integration module can be downloaded here.
A live demonstration of the integration will take place at Black Hat USA, in Las Vegas, Nevada, in the Bit9 + Carbon Black booth (#735) on Thursday, August 6th at 1:00 p.m. PST. Infoblox will also be showcasing its security solutions at the Infoblox booth (#865) on August 5th and August 6th during Business Hall hours.
About Bit9 + Carbon Black
Bit9 + Carbon Black provides the most complete solution against advanced threats that target organizations’ endpoints and servers, making it easier to see—and immediately stop—those threats. The company enables organizations to arm their endpoints by combining continuous, real-time visibility into what’s happening on every computer; real-time signature-less threat detection; incident response that combines a recorded history with live remediation; and prevention that is proactive and customizable. More than 1,400 organizations worldwide—from Fortune 100 companies to small enterprises—use Bit9 + Carbon Black to increase security, reduce operational costs and improve compliance. Leading managed security service providers (MSSP) and incident response (IR) companies have made Bit9 + Carbon Black a core component of their detection and response services.
Bit9 and Carbon Black are registered trademarks of Bit9, Inc. All other company or product names may be the trademarks of their respective owners.