Cisco Sourcefire SNORT vs. Infoblox Secure DNS

Snort is an open-source, rule-based, intrusion detection and prevention system. It combines the benefits of signature-, protocol-, and anomaly-based inspection methods to deliver flexible protection from malware attacks. Snort gained notoriety for being able to accurately detect threats at high speeds.

DNS is one of the fastest growing attack vectors because it’s essential for network connectivity, and current security solutions are not designed to protect it. Distributed denial of service (DDoS) and other external and internal DNS-based threats can flood your DNS server with malicious requests, bringing down your network. These attacks can redirect users to harmful Internet destinations, exfiltrate data, and expose your customers and business to additional risks. Security technologies such as NextGen firewalls, IPS, and generic DDoS solutions do not understand DNS and are unable to prevent specific attacks such as DNS cache poisoning, DNS hijacking, reflection attacks, amplification attacks, and many others.

With Infoblox Advanced DNS Protection, you can comprehensively defend your DNS server from the widest range of DNS-based attacks, while maintaining service availability and business continuity.