Infoblox BloxOne Threat Defense vs Palo Alto Networks DNS Security comparison

Infoblox BloxOne Threat Defense vs. Palo Alto Networks DNS Security

Download the complete report

Helped 914,109 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Infoblox BloxOne Threat Def...

Ranking in Domain Name System (DNS) Security

6th

Average Rating

8.2

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Palo Alto Networks DNS Secu...

Ranking in Domain Name System (DNS) Security

3rd

Average Rating

8.6

Reviews Sentiment

6.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of September 2026, in the Domain Name System (DNS) Security category, the mindshare of Infoblox BloxOne Threat Defense is 3.9%, down from 4.6% compared to the previous year. The mindshare of Palo Alto Networks DNS Security is 10.2%, up from 8.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Domain Name System (DNS) Security Mindshare Distribution
Product	Mindshare (%)
Palo Alto Networks DNS Security	10.2%
Infoblox BloxOne Threat Defense	3.9%
Other	85.9%

Domain Name System (DNS) Security

Featured Reviews

GANESAN K

Senior Technical Engineer at Safezone Secure Solutions Private Limited

Centralized DNS security has simplified subnet policies and now protects users across networks

The scheduled report feature for Infoblox BloxOne Threat Defense needs improvement. The scheduled reports are sent with a standardized template from Infoblox. It would be highly beneficial if we had customization options for the scheduled reports. This is a key feature that many enterprise customers would be seeking, especially when they need to present reports to management. The reports should include pie charts or bar graphs indicating what traffic is coming and going through the system. Those chart types and drill-down details are also essential for the IT team. We need more customized reports that can provide different reports for the management team and for the IT team. The current reports are available but are not as helpful as customers need. We are currently dedicating logs manually and doing this as a service for our customers, but this should be handled by Infoblox BloxOne Threat Defense. Infoblox BloxOne Threat Defense is a bit expensive.

Read full review

reviewer2695164

IT Security Specialist at a tech services company with 11-50 employees

Provides comprehensive protection for outgoing traffic and has improved management through AI features

I am currently working in IT security, focusing mainly on firewalls and IDS solutions. My primary focus is on Palo Alto Networks DNS Security. I only work with physical firewalls, specifically the 400 series and 1400 series, not with K2-Series firewall, Prisma Access, or CN-Series. We are using the URL Filtering license, Advanced Threat Prevention license, and DNS Security license. I think the price of Palo Alto Networks DNS Security is quite realistic; it's not too expensive, but of course, it's not cheap. Our clients are mainly using on-premises solutions. On a scale of 1-10, I rate Palo Alto Networks DNS Security an 8.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"When it comes to helping to detect DNS threats, BloxOne is good on all fronts; the number of false positives is very low, close to none, and more than once it has detected new names or lookalike names and protected us and saved us from bad characters."

"The most valuable feature is policy redirecting and security reports."

"I would advise others to take the whole DNS Firewall subscription because it will add value to their solution."

"Infoblox BloxOne Threat Defense saves time and reduces workforce dependencies, and instead of having separate DHCP and DNS servers, separate Windows OS, and separate infrastructure with ongoing maintenance costs, those costs are covered within this solution itself."

"The stability of Infoblox BloxOne Threat Defense is near perfect at a rating of ten."

"The reporting ability is helpful. It allows us to control what our users are able to resolve, and then be able to see reports on that."

"Threat Defense has helped protect data from being stolen or lost."

"Overall, I would rate the Infoblox BloxOne Threat Defense as 8.5 out of 10."

More Infoblox BloxOne Threat Defense pros

"A lot is working well."

"This product is used in our organization to prevent all of the potential threats that we expect from the internet, including everything that can reach the end-user from the internet, and it is beneficial for us because we are in the process of migrating everything from on-premises to the cloud."

"The most valuable feature is DNS filtering."

"The solution's most valuable features are data exfiltration and DNS tunneling."

"The most valuable features of the solution are DNSSEC and the domain generation algorithm."

"We now have insight into our DNS requests and we can actively see how many thousands of malicious requests have gotten knocked down in the last day or week that we didn't have before. There's more insight for both security and more insight."

"The most valuable features of DNS Security include its ability to protect against command and control traffic, anonymizers, newly registered domains, and DNS tunneling."

"I think it's easy to manage Palo Alto Networks DNS Security compared to other firewalls, and the feature set is really good."

More Palo Alto Networks DNS Security pros

Cons

"I have faced quite a few problems in my eight months of experience with the product in GTS, despite it being a relatively short period."

"The documentation needs to be improved because there are a lot of different models that it can be deployed in, and it's somewhat confusing determining what you need and how to set it up to best cover your use cases."

"The setup was horrible. About a year ago, Infoblox made us re-enroll all our on-prem DNS servers by a set date to a specific version, or it would stop working. I told my colleague, "Oh, here, we have to upgrade the servers and reconnect them to the CSP." That did not go well at all."

"This is not just Infoblox, this could be any portal provider, cloud provider, sometimes they change the look of the customer-facing options and it's not completely clear why they make the change."

"The integration of embedded threat intelligence with other platforms should be better."

"A lot of their documentation needs improvement."

"The research side and the reporting side need improvement."

"They could work on the UI of their website and make their website more user-friendly."

More Infoblox BloxOne Threat Defense cons

"The solution’s scalability could be improved."

"The installation is more complex because the solution has another approach to security."

"Pricing is one of the areas of concern in Palo Alto Networks DNS Security since it is an expensive product. I feel that the product's pricing is an area that could be improved."

"The solution can capture more market if made more cost-competitive than Infoblox or Cisco Umbrella."

"If the tool offers improved data security, I think it would be good."

"With Palo Alto Networks DNS Security, sometimes the DNS clients don't work well, and they get disconnected, making it an area where improvements are required."

"The pricing of the Palo Alto Networks DNS Security is very high."

"I have found customer service to be quite problematic. The support is often outsourced, leading to delayed response times."

More Palo Alto Networks DNS Security cons

Pricing and Cost Advice

"Infoblox BloxOne offers pretty good documentation. Check its documentation, then do a PoC. Infoblox is very good at providing PoCs."

"The licensing is set up such that you pay for the number of active users that you're defending at the moment."

"It is a very expensive system. You need to go over the licensing before purchase to make sure you're getting what is needed, not anything extra."

"There is a significant charge for this product but I think that it's worth it when we look at what it's able to prevent."

"If you only wanted the DNS filtering and none of the other products built into Threat Defense, it would be nicer if they could do that a la carte since we are not really using a lot of the solution."

"When you buy the subscription, there are no additional costs to add any additional buttons."

"It's a pricey solution because it's for the advanced kind of customer."

"The product is expensive. My company makes payments on a quarterly basis towards the solution's costs."

"Palo Alto Networks DNS Security is an expensive product. I rate the product's pricing an eight on a scale of one to ten, where one is cheap, and ten points are expensive."

"It is not an expensive solution."

"If one is very cheap and ten is very expensive, I rate the tool's price as two."

"There is an annual license for the solution and I am satisfied with the pricing."

"The product is expensive compared to Fortinet."

"The solution's pricing is equal to Cisco AMP or Cisco Umbrella."

"There aren't many vendors offering DNS security solutions, but generally, Palo Alto subscriptions tend to be more expensive than other security vendors."

See which vendors are best for you

Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.

See recommendations

914,109 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Outsourcing Company

Healthcare Company

Manufacturing Company

Financial Services Firm

14%

Manufacturing Company

11%

Computer Software Company

Performing Arts

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	4
Large Enterprise	15

By reviewers
Company Size	Count
Small Business	6
Large Enterprise	10

Questions from the Community

What is your experience regarding pricing and costs for Infoblox BloxOne Threat Defense?

Regarding pricing, setup cost, and licensing, Infoblox BloxOne Threat Defense is costly compared to other tools such as Cisco Umbrella and Palo Alto DNS security and DNS filter.

What needs improvement with Infoblox BloxOne Threat Defense?

The policy in Infoblox BloxOne Threat Defense is something complex. That needs to be simpler because it's difficult for someone without a high skill level to understand. The interface is fine, but ...

What is your primary use case for Infoblox BloxOne Threat Defense?

My main use case for Infoblox BloxOne Threat Defense is for DNS security. I generally use this for threat defense, which mostly comes under DNS itself. So, it's DNS security and protective DNS plat...

What needs improvement with Palo Alto Networks DNS Security?

DNS Security protects us against threats, malware, and malicious domains or malicious navigation to the internet, which is where it can be improved the best. Palo Alto helps us with support, so I d...

What is your primary use case for Palo Alto Networks DNS Security?

I can describe my use cases for Palo Alto Networks DNS Security, which is used for protecting our network. I use this product, Palo Alto Networks DNS Security, with Palo Alto firewalls.

What advice do you have for others considering Palo Alto Networks DNS Security?

I don't have experience with Palo Alto Networks AutoFocus. Regarding the DNS Security, I have firewalls with the DNS Security module in the firewall. DNS Security is something we configure in our f...

Cisco Umbrella vs Infoblox BloxOne Threat Defense

Comparisons

Compared 13% of the time

EfficientIP DNS Guardian vs Infoblox BloxOne Threat Defense

Compared 9% of the time

Zscaler Internet Access vs Infoblox BloxOne Threat Defense

Compared 7% of the time

HYAS Protect vs Infoblox BloxOne Threat Defense

Compared 7% of the time

BlueCat Edge vs Infoblox BloxOne Threat Defense

Compared 6% of the time

More Infoblox BloxOne Threat Defense Competitors

Cisco Umbrella vs Palo Alto Networks DNS Security

Compared 62% of the time

Infoblox Advanced DNS Protection vs Palo Alto Networks DNS Security

Compared 5% of the time

DNSFilter vs Palo Alto Networks DNS Security

Compared 5% of the time

BlueCat Edge vs Palo Alto Networks DNS Security

Compared 4% of the time

EfficientIP DNS Firewall vs Palo Alto Networks DNS Security

Compared 4% of the time

More Palo Alto Networks DNS Security Competitors

Product Reports

Infoblox BloxOne Threat Defense

Download Infoblox BloxOne Threat Defense product report

Palo Alto Networks DNS Security

Download Palo Alto Networks DNS Security product report

Also Known As

BloxOne Threat Defense, Infoblox ActiveTrust, Infoblox ActiveTrust Cloud

No data available

Overview

Infoblox BloxOne Threat Defense secures DNS with features like DNS firewall, threat detection, and automatic blocklists. Enhancing security through predictive threat intelligence and real-time analytics, it integrates with SIEM systems and Infoblox appliances for robust monitoring and reporting.

Infoblox BloxOne Threat Defense is designed to protect against DNS tunneling, malware, and data exfiltration, acting as a firewall that filters DNS traffic to block malicious domains and secure network queries. Its user-friendly interface minimizes false positives and uses a protocol-agnostic approach, making it valuable for organizations with significant cybersecurity needs. It efficiently improves network security posture through real-time analytics and predictive threat intelligence. Despite its effective security features, improvements are needed in dashboard and reporting, with difficulties in platform integration and inconsistent documentation. Users have requested better navigation, improved network observability, and a more affordable version for smaller clients.

What are the key features of Infoblox BloxOne Threat Defense?

DNS Firewall: Acts as a barrier to protect against unauthorized DNS traffic.
Threat Detection: Identifies potential security threats in real-time.
Automatic Blocklists: Blocks access to known malicious domains automatically.
SIEM Integration: Seamlessly integrates with SIEM systems for comprehensive reporting.
Real-Time Analytics: Provides instant insights for proactive security measures.

What benefits and ROI should users consider?

Enhanced Security: Increased protection against DNS-related threats.
Comprehensive Monitoring: Extensive analysis through SIEM integration.
User-Friendly Interface: Simplified management and reduced false positives.
Scalability: Adaptable for organizations with extensive cybersecurity requirements.
Network Stability: Improved network uptime and stability through DNS threat prevention.

In industries like finance and healthcare, Infoblox BloxOne Threat Defense is implemented to safeguard sensitive data from DNS threats. Companies rely on its ability to integrate with existing security infrastructure, such as Palo Alto Firewalls, ensuring DNS remains a crucial defense layer while maintaining compliance and data integrity standards.

Infoblox

Palo Alto Networks DNS Security provides robust protection against DNS-based attacks with seamless deployment and integration, enhancing network security with minimal disruption.

Focused on real-time threat intelligence, Palo Alto Networks DNS Security blocks tunneling and rebinding attacks while offering malware protection and command/control traffic shielding. Its deployment is seamless, requiring no major architectural changes and ensuring global integration with scalable stability. DNS sinkholes and machine learning play key roles in threat detection, alongside comprehensive reporting and analytics for proactive cyber defense. While pricing and technical support face some criticism, its effectiveness in malware defense remains valuable to users.

What are the key features?

DNS Filtering: Block malicious DNS requests efficiently.
Real-Time Threat Intelligence: Provides insights to preempt threats.
Malware Protection: Shields against malware infiltration.
Command/Control Shielding: Protects against control server attacks.
Machine Learning: Enhances threat detection capabilities.
DNS Sinkhole: Identifies and blocks malicious domains.

What are the expected benefits or ROI?

Improved Network Security: Strengthen defenses against DNS and malware threats.
Proactive Defense: Benefit from real-time threat insights.
Seamless Integration: Easy deployment without infrastructure overhauls.
Insightful Analytics: Comprehensive reports for informed decision-making.

In sectors such as finance, healthcare, and government, Palo Alto Networks DNS Security is essential for preventing data breaches, securing critical infrastructure, and protecting remote workforce access. By integrating seamlessly with existing firewalls, it ensures comprehensive coverage for both on-premise and cloud environments, addressing insider threats and securing endpoints like mobile devices and laptops.

Palo Alto Networks

Sample Customers

Council Rock School District, EagleView, Schneider Electric, Baptist Memorial Health Care, American University

Information Not Available

Infoblox BloxOne Threat Defense vs. Palo Alto Networks DNS Security