Infoblox has announced the acquisition of privately held IID, a provider of global cyber threat intelligence. The acquisition of IID makes Infoblox the first enterprise-grade DDI vendor that combines contextual network data with federated threat intelligence and a dedicated threat research team, to provide context-aware security using infrastructure that customers already have in place. Infoblox paid $45 million in cash, subject to customary adjustments, to the former IID stockholders as consideration for the transaction.
Today, many organisations are mired in confusion when it comes to securing their networks and broader IT infrastructure. Threat intelligence services give warnings, but don’t provide a path for translating that information into action. Monitoring systems warn of malicious activity within a network, but don’t give clarity on where to find infected devices, user information, and other metadata. Most important, network and security administrators are drowning in data and alerts, with no easy way to prioritize effective and timely threat response.
Infoblox is the industry leader in managing DNS, DHCP, and IP addresses—the category known as DDI. These services are uniquely at the center of every network, making it possible for Infoblox to spot suspicious activity, instantly block outbound communications to malicious destinations, and prevent exfiltration of intellectual property, customer information, and other sensitive data. The security solutions offered by Infoblox today are designed to complement and work with other security products, meeting the emerging customer demand for integrated heterogeneous security ecosystems.
“Life in enterprise networking and security is changing too fast, and it’s no longer enough to have set-and-forget perimeter protection,” said Simran Sandhu, manager of network infrastructure at Adobe Systems. “Adobe is a customer of both Infoblox and IID, so we’re excited about how this acquisition can create a single platform for greater integration between devices, firewalls, network insights, and threat intelligence in an open ecosystem.”
“By bringing together the deep and very rich threat intelligence from IID with the context and the central control point that Infoblox has in the network through our DDI services, we can deliver a unique value proposition to our customers and the partners that resell our products,” said Jesper Andersen, president and chief executive officer of Infoblox. “Infoblox and IID are also both committed to the emerging standards for automated sharing of threat intelligence information that will help extend our ecosystem.”
“Enterprise security teams have a difficult time putting threat intelligence into operation,” said Lars Harvey, chief executive officer of IID. “It’s challenging to get machine-readable threat intelligence in formats that are usable, and even harder to directly integrate threat intelligence with devices on the network. The combination of IID with Infoblox puts all these pieces in one package, helping enable enterprises to go from threat discovery to enforcement and mitigation within seconds.”
IID (www.internetidentity.com), based in Tacoma, Washington, collects threat data from thousands of trusted sources including law-enforcement agencies, Internet infrastructure providers, and open-source providers.
Last year, Infoblox and IID partnered in creation of the Infoblox DNS Threat Index, a quarterly report tracking the growth of malicious domains created by cyber criminals.
IID co-founders Lars Harvey and Rod Rasmussen will become members of the Infoblox management team. Infoblox also expects that most IID employees will join Infoblox, including the threat intelligence and engineering teams.
