Infoblox BloxOne Threat Defense vs Palo Alto Networks DNS Security comparison

Infoblox BloxOne Threat Defense vs. Palo Alto Networks DNS Security

Download the complete report

Helped 913,683 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Infoblox BloxOne Threat Def...

Ranking in Domain Name System (DNS) Security

6th

Average Rating

8.2

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Palo Alto Networks DNS Secu...

Ranking in Domain Name System (DNS) Security

3rd

Average Rating

8.6

Reviews Sentiment

6.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of September 2026, in the Domain Name System (DNS) Security category, the mindshare of Infoblox BloxOne Threat Defense is 3.9%, down from 4.6% compared to the previous year. The mindshare of Palo Alto Networks DNS Security is 10.2%, up from 8.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Domain Name System (DNS) Security Mindshare Distribution
Product	Mindshare (%)
Palo Alto Networks DNS Security	10.2%
Infoblox BloxOne Threat Defense	3.9%
Other	85.9%

Domain Name System (DNS) Security

Featured Reviews

GANESAN K

Senior Technical Engineer at Safezone Secure Solutions Private Limited

Centralized DNS security has simplified subnet policies and now protects users across networks

The scheduled report feature for Infoblox BloxOne Threat Defense needs improvement. The scheduled reports are sent with a standardized template from Infoblox. It would be highly beneficial if we had customization options for the scheduled reports. This is a key feature that many enterprise customers would be seeking, especially when they need to present reports to management. The reports should include pie charts or bar graphs indicating what traffic is coming and going through the system. Those chart types and drill-down details are also essential for the IT team. We need more customized reports that can provide different reports for the management team and for the IT team. The current reports are available but are not as helpful as customers need. We are currently dedicating logs manually and doing this as a service for our customers, but this should be handled by Infoblox BloxOne Threat Defense. Infoblox BloxOne Threat Defense is a bit expensive.

Read full review

reviewer2695164

IT Security Specialist at a tech services company with 11-50 employees

Provides comprehensive protection for outgoing traffic and has improved management through AI features

I am currently working in IT security, focusing mainly on firewalls and IDS solutions. My primary focus is on Palo Alto Networks DNS Security. I only work with physical firewalls, specifically the 400 series and 1400 series, not with K2-Series firewall, Prisma Access, or CN-Series. We are using the URL Filtering license, Advanced Threat Prevention license, and DNS Security license. I think the price of Palo Alto Networks DNS Security is quite realistic; it's not too expensive, but of course, it's not cheap. Our clients are mainly using on-premises solutions. On a scale of 1-10, I rate Palo Alto Networks DNS Security an 8.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"When it comes to helping to detect DNS threats, BloxOne is good on all fronts; the number of false positives is very low, close to none, and more than once it has detected new names or lookalike names and protected us and saved us from bad characters."

"The automatic blocklists are most valuable. A box can maintain several lists from which we can choose if we need to block more or less. We don't have to manually manage the lists ourselves. They're automatically updated."

"We love BloxOne Threat Defense."

"In general, we have benefitted from this product because it's allowed us to more rapidly identify and respond to potential issues that our other security tools haven't discovered, or discovered later."

"I find all the features of Infoblox BloxOne Threat Defense, including asset discovery as well as DNS security, most valuable."

"Infoblox BloxOne Threat Defense saves time and reduces workforce dependencies, and instead of having separate DHCP and DNS servers, separate Windows OS, and separate infrastructure with ongoing maintenance costs, those costs are covered within this solution itself."

"The stability of Infoblox BloxOne Threat Defense is near perfect at a rating of ten."

"The most valuable feature is policy redirecting and security reports."

More Infoblox BloxOne Threat Defense pros

"I think it's easy to manage Palo Alto Networks DNS Security compared to other firewalls, and the feature set is really good."

"The solution's most valuable features are data exfiltration and DNS tunneling."

"DNS sinkhole is a valuable feature."

"The most valuable features of DNS Security include its ability to protect against command and control traffic, anonymizers, newly registered domains, and DNS tunneling."

"This product is used in our organization to prevent all of the potential threats that we expect from the internet, including everything that can reach the end-user from the internet, and it is beneficial for us because we are in the process of migrating everything from on-premises to the cloud."

"The main feature of the Palo Alto Networks DNS Security protects our network from external attacks, malware, and data theft."

"The support team has good knowledge about the solution."

"So, in general, it's very stable because the process to deliver new features and new releases in not so long...I rate the scalability a nine out of ten."

More Palo Alto Networks DNS Security pros

Cons

"The onboarding is a little rough at times, and you need to have some information at hand. It is pretty good, but it would be useful to have a few good examples to set up things like data exfiltration."

"The integration of embedded threat intelligence with other platforms should be better."

"The product is slightly more expensive compared to other DNS solutions."

"We would like to see more reporting capabilities that are now offered only with the on-premises reporting appliance."

"The dashboard and reporting features need improvement. The user needs more informative dashboards so they can get to the results directly without having to search deep into the report to pull out information."

"The setup was horrible. About a year ago, Infoblox made us re-enroll all our on-prem DNS servers by a set date to a specific version, or it would stop working. I told my colleague, "Oh, here, we have to upgrade the servers and reconnect them to the CSP." That did not go well at all."

"The product could be cheaper."

"The documentation needs to be improved because there are a lot of different models that it can be deployed in, and it's somewhat confusing determining what you need and how to set it up to best cover your use cases."

More Infoblox BloxOne Threat Defense cons

"I'm not really sure what needs improvement. The only hiccup I've really seen is a couple of the DNS requests get flagged as the Sophos traffic instead of DNS traffic, but that's more of their app detection in the DNS Security. I haven't really seen any issues with the DNS security."

"Palo Alto should explore agentless approaches to integrate DNS Security more easily and efficiently."

"The product is not as stable as other solutions, such as Cisco Umbrella, Infoblox, and EfficientIP."

"Every vendor that sells DNS or firewalls needs to be able to protect against DNS look-up attacks and DNS naming hacks. This is true of Palo Alto as well as others."

"The solution can capture more market if made more cost-competitive than Infoblox or Cisco Umbrella."

"The pricing of the Palo Alto Networks DNS Security is very high."

"Sometimes, it blocks legitimate traffic for custom applications, requiring manual intervention."

"Pricing is one of the areas of concern in Palo Alto Networks DNS Security since it is an expensive product. I feel that the product's pricing is an area that could be improved."

More Palo Alto Networks DNS Security cons

Pricing and Cost Advice

"It is a very expensive system. You need to go over the licensing before purchase to make sure you're getting what is needed, not anything extra."

"The licensing is set up such that you pay for the number of active users that you're defending at the moment."

"If you only wanted the DNS filtering and none of the other products built into Threat Defense, it would be nicer if they could do that a la carte since we are not really using a lot of the solution."

"Infoblox BloxOne offers pretty good documentation. Check its documentation, then do a PoC. Infoblox is very good at providing PoCs."

"There is a significant charge for this product but I think that it's worth it when we look at what it's able to prevent."

"It's a pricey solution because it's for the advanced kind of customer."

"When you buy the subscription, there are no additional costs to add any additional buttons."

"The product is expensive. My company makes payments on a quarterly basis towards the solution's costs."

"The solution's pricing is equal to Cisco AMP or Cisco Umbrella."

"There is an annual license for the solution and I am satisfied with the pricing."

"Palo Alto Networks DNS Security is an expensive product. I rate the product's pricing an eight on a scale of one to ten, where one is cheap, and ten points are expensive."

"The product is expensive compared to Fortinet."

"There aren't many vendors offering DNS security solutions, but generally, Palo Alto subscriptions tend to be more expensive than other security vendors."

"If one is very cheap and ten is very expensive, I rate the tool's price as two."

"It is not an expensive solution."

See which vendors are best for you

Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.

See recommendations

913,683 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Outsourcing Company

Healthcare Company

Manufacturing Company

Financial Services Firm

14%

Manufacturing Company

11%

Computer Software Company

Performing Arts

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	4
Large Enterprise	15

By reviewers
Company Size	Count
Small Business	6
Large Enterprise	10

Questions from the Community

What is your experience regarding pricing and costs for Infoblox BloxOne Threat Defense?

Regarding pricing, setup cost, and licensing, Infoblox BloxOne Threat Defense is costly compared to other tools such as Cisco Umbrella and Palo Alto DNS security and DNS filter.

What needs improvement with Infoblox BloxOne Threat Defense?

The policy in Infoblox BloxOne Threat Defense is something complex. That needs to be simpler because it's difficult for someone without a high skill level to understand. The interface is fine, but ...

What is your primary use case for Infoblox BloxOne Threat Defense?

My main use case for Infoblox BloxOne Threat Defense is for DNS security. I generally use this for threat defense, which mostly comes under DNS itself. So, it's DNS security and protective DNS plat...

What needs improvement with Palo Alto Networks DNS Security?

DNS Security protects us against threats, malware, and malicious domains or malicious navigation to the internet, which is where it can be improved the best. Palo Alto helps us with support, so I d...

What is your primary use case for Palo Alto Networks DNS Security?

I can describe my use cases for Palo Alto Networks DNS Security, which is used for protecting our network. I use this product, Palo Alto Networks DNS Security, with Palo Alto firewalls.

What advice do you have for others considering Palo Alto Networks DNS Security?

I don't have experience with Palo Alto Networks AutoFocus. Regarding the DNS Security, I have firewalls with the DNS Security module in the firewall. DNS Security is something we configure in our f...

Cisco Umbrella vs Infoblox BloxOne Threat Defense

Comparisons

Compared 13% of the time

EfficientIP DNS Guardian vs Infoblox BloxOne Threat Defense

Compared 9% of the time

Zscaler Internet Access vs Infoblox BloxOne Threat Defense

Compared 8% of the time

HYAS Protect vs Infoblox BloxOne Threat Defense

Compared 7% of the time

BlueCat Edge vs Infoblox BloxOne Threat Defense

Compared 6% of the time

More Infoblox BloxOne Threat Defense Competitors

Cisco Umbrella vs Palo Alto Networks DNS Security

Compared 62% of the time

Infoblox Advanced DNS Protection vs Palo Alto Networks DNS Security

Compared 5% of the time

DNSFilter vs Palo Alto Networks DNS Security

Compared 5% of the time

BlueCat Edge vs Palo Alto Networks DNS Security

Compared 4% of the time

EfficientIP DNS Firewall vs Palo Alto Networks DNS Security

Compared 4% of the time

More Palo Alto Networks DNS Security Competitors

Product Reports

Infoblox BloxOne Threat Defense

Download Infoblox BloxOne Threat Defense product report

Palo Alto Networks DNS Security

Download Palo Alto Networks DNS Security product report

Also Known As

BloxOne Threat Defense, Infoblox ActiveTrust, Infoblox ActiveTrust Cloud

No data available

Overview

Infoblox BloxOne Threat Defense secures DNS with features like DNS firewall, threat detection, and automatic blocklists. Enhancing security through predictive threat intelligence and real-time analytics, it integrates with SIEM systems and Infoblox appliances for robust monitoring and reporting.

Infoblox BloxOne Threat Defense is designed to protect against DNS tunneling, malware, and data exfiltration, acting as a firewall that filters DNS traffic to block malicious domains and secure network queries. Its user-friendly interface minimizes false positives and uses a protocol-agnostic approach, making it valuable for organizations with significant cybersecurity needs. It efficiently improves network security posture through real-time analytics and predictive threat intelligence. Despite its effective security features, improvements are needed in dashboard and reporting, with difficulties in platform integration and inconsistent documentation. Users have requested better navigation, improved network observability, and a more affordable version for smaller clients.

What are the key features of Infoblox BloxOne Threat Defense?

DNS Firewall: Acts as a barrier to protect against unauthorized DNS traffic.
Threat Detection: Identifies potential security threats in real-time.
Automatic Blocklists: Blocks access to known malicious domains automatically.
SIEM Integration: Seamlessly integrates with SIEM systems for comprehensive reporting.
Real-Time Analytics: Provides instant insights for proactive security measures.

What benefits and ROI should users consider?

Enhanced Security: Increased protection against DNS-related threats.
Comprehensive Monitoring: Extensive analysis through SIEM integration.
User-Friendly Interface: Simplified management and reduced false positives.
Scalability: Adaptable for organizations with extensive cybersecurity requirements.
Network Stability: Improved network uptime and stability through DNS threat prevention.

In industries like finance and healthcare, Infoblox BloxOne Threat Defense is implemented to safeguard sensitive data from DNS threats. Companies rely on its ability to integrate with existing security infrastructure, such as Palo Alto Firewalls, ensuring DNS remains a crucial defense layer while maintaining compliance and data integrity standards.

Infoblox

Palo Alto Networks DNS Security provides robust protection against DNS-based attacks with seamless deployment and integration, enhancing network security with minimal disruption.

Focused on real-time threat intelligence, Palo Alto Networks DNS Security blocks tunneling and rebinding attacks while offering malware protection and command/control traffic shielding. Its deployment is seamless, requiring no major architectural changes and ensuring global integration with scalable stability. DNS sinkholes and machine learning play key roles in threat detection, alongside comprehensive reporting and analytics for proactive cyber defense. While pricing and technical support face some criticism, its effectiveness in malware defense remains valuable to users.

What are the key features?

DNS Filtering: Block malicious DNS requests efficiently.
Real-Time Threat Intelligence: Provides insights to preempt threats.
Malware Protection: Shields against malware infiltration.
Command/Control Shielding: Protects against control server attacks.
Machine Learning: Enhances threat detection capabilities.
DNS Sinkhole: Identifies and blocks malicious domains.

What are the expected benefits or ROI?

Improved Network Security: Strengthen defenses against DNS and malware threats.
Proactive Defense: Benefit from real-time threat insights.
Seamless Integration: Easy deployment without infrastructure overhauls.
Insightful Analytics: Comprehensive reports for informed decision-making.

In sectors such as finance, healthcare, and government, Palo Alto Networks DNS Security is essential for preventing data breaches, securing critical infrastructure, and protecting remote workforce access. By integrating seamlessly with existing firewalls, it ensures comprehensive coverage for both on-premise and cloud environments, addressing insider threats and securing endpoints like mobile devices and laptops.

Palo Alto Networks

Sample Customers

Council Rock School District, EagleView, Schneider Electric, Baptist Memorial Health Care, American University

Information Not Available

Infoblox BloxOne Threat Defense vs. Palo Alto Networks DNS Security