F5 and Infoblox offer complete DNS Security Solutions

F5 Networks and Infoblox have partnered
to develop a solution to simplify and speed deployment of the Domain
Name System Security Extensions (DNSSEC). F5 and Infoblox together
deliver fully integrated and complete DNSSEC solution, including
high-performance DNS and global server load balancing functions, all
supporting signed DNSSEC data. This provides customers a scalable,
manageable, and secure DNS infrastructure that is equipped to
withstand DNS attacks.

The solution is a combination of
Infoblox's purpose-built appliances that deliver secure DNS
services with built-in, automated DNSSEC features, and F5 BIG-IP
Global Traffic Manager appliances optimized with hardware
acceleration facilitating real-time signing of DNSSEC signature
queries.

Many security experts consider DNSSEC
to be an essential tool in “sealing” DNS vulnerabilities and
mitigating DNS cache poisoning attacks. DNSSEC implements an
automated trust infrastructure, enabling systems to verify the
authenticity of the DNS information, and foils attackers' attempts
to direct users to alternate sites―for collection of credit card
information and passwords, to redirect email, or otherwise compromise
applications. “This joint solution changes the game for DNS
infrastructure deployments by advancing the security and integrity of
both government and enterprise sites,” said Jason Needham, Senior
Director-Product Management, F5.

Cricket Liu,VP-Architecture and DNS
expert, Infoblox said, “The combination of F5 and Infoblox
appliances provide enterprise customers an opportunity to build
authoritative DNS infrastructure without giving up either global
server load balancing or DNSSEC-a no-compromise solution.”

Infoblox's DNSSEC features replace
manual key generation and zone signing with a “one-click” process
that generates and securely distributes encryption keys to all
appliances in the Infoblox Grid that serve DNSSEC data. F5 provides a
FIPS-compliant option to satisfy the most stringent military grade
key security. Both F5 and Infoblox systems handle the NIST
recommended key polices and automatic rollover.

Kaminsky, Director-Penetration
Testing, IOActive said, “The lack of DNS security not only makes
the Internet vulnerable, but is also crippling the scalability of
important security technologies. DNSSEC offers the most feasible
solution to a serious threat.”

“DNSSEC adoption has been hampered by
concerns over the operational complexity with provisioning encryption
keys and the processing overhead required to sign DNS information,”
said Jon Oltsik, Senior Analyst at Enterprise Strategy Group.
“Additionally, customers haven't had a seamless DNSSEC
architecture option for global server load balancing and standard
DNS, so they've had to choose between either deploying reliable
intelligent DNS systems or securing their DNS infrastructure with
DNSSEC. With the F5 and Infoblox solution, customers no longer need
to compromise,” he said.

There is a joint F5 and Infoblox DNSSEC
webinar scheduled for Wednesday, March 10. The webinar speakers will
feature industry experts Dan Kaminsky, Scott Rose, and Cricket Liu
highlighting the value of DNSSEC and offering some related best
practices.