Try our new research platform with insights from 80,000+ expert users

Infoblox BloxOne Threat Defense vs Zscaler Internet Access comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Infoblox BloxOne Threat Def...
Average Rating
8.0
Reviews Sentiment
6.0
Number of Reviews
16
Ranking in other categories
Domain Name System (DNS) Security (6th)
Zscaler Internet Access
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
52
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Internet Security (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Infoblox BloxOne Threat Defense is designed for Domain Name System (DNS) Security and holds a mindshare of 6.0%, up 5.1% compared to last year.
Zscaler Internet Access, on the other hand, focuses on Secure Web Gateways (SWG), holds 15.2% mindshare, down 17.2% since last year.
Domain Name System (DNS) Security
Secure Web Gateways (SWG)
 

Featured Reviews

Igor Van Den Ouden - PeerSpot reviewer
A hybrid solution for DNS security with insights and security reports
The most valuable feature is policy redirecting and security reports. It detects threats and blocks them. Also, it offers DNS handling and data extraction. It provides a centralized view of connected users and incoming data sources. It is integrated via the API to different monitoring systems that send out alerts. We haven't had any false positives due to this solution.
ShanavasVK - PeerSpot reviewer
Helps maintain a consistent posture of internet security while getting rid of VPN and hovering into zero trust
There could be a better way for the tool to categorize the traffic. For example, the tool does exceptions and everything overall. If I want to give guest access or provide access to guest users or any other internet access and if it does not go through the SSL inspection because, in our company, we can't have the root certificate on a device that we don't manage, which can be called out as an exception or an exclusion, but that doesn't provide a proper reflection of the picture of what is happening in the environment. There are granularities bringing it down. The tool I used or still have is Zscaler Cloud Connector to protect the cloud environment, which can have a bit more user-friendly installation and setup, and it would help a lot. The deployment process of Zscaler Cloud Connector needs to be more user-friendly. Improvements are required in the exception category. For example, suppose I report on a monthly basis what the breaches and traffic violating the SSL inspection area are coming from. In that case, I may find that half of them may be coming through some guest network, meaning the tool doesn't differentiate between the guest or normal networks or the corporate networks. Having options to differentiate different networks would be ideal so that it can show a true picture of things to users, as half of the things in the tool are not in our control and are not of our concern.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The dossier feature is perfect for starting an investigation."
"Our ability to detect data exfiltration was minimal before Infoblox and the cloud portal was instituted for us. In terms of DNS security as a whole, we had some capability with our firewalls, but this is a lot more specialized because we're sending all of our DNS requests to Infoblox. I'd say we improved 100%."
"The most valuable feature is blocklisting. It's good at what I like to describe as the "silly side cases." We have this annoying security architecture that says we must do this, that, and the other, so we try to make it easier on ourselves."
"The product is stable."
"Infoblox has helped us improve in the way that we look at data as it comes in and out. We monitor and manage queries from every device that sits inside our company, e.g., every user, every laptop, and every query. When you type something into the web, Infoblox will scan or manage that. If it is going somewhere bad, then it will block them. From a metrics perspective, it gives us data, letting us go back and find those impacted or infected clients to either clean their devices or remove them from the network."
"When it comes to helping to detect DNS threats, BloxOne is good on all fronts. The number of false positives is very low, close to none. More than once it has detected new names or lookalike names and protected us and saved us from bad characters."
"Infoblox BloxOne Threat Defense furthers the existing security posture rather than replacing or trying to replace any existing products."
"Using the reporting, we can tell that we have gained an extra layer of protection. Just by looking at it, we can see what is being blocked before it even makes it to the firewall. It is definitely working."
"The most valuable feature of the solution is SWG traffic."
"We enjoy all of the proxy capabilities and the capability to integrate into the SIEM/SOC solution."
"The most valuable features I found in Zscaler Internet Access are the restriction of users for a particular URL, the security feature related to stopping DDoS, and the VPN."
"Zscaler Internet Access's best feature is the granular policy controls."
"The cloud proxy and integration are some of the key features. Since there is cloud waste, we can quickly provision it and start working on the configuration. On top of that, they have added a few more features. They have integrated CASB, and file sandboxing is part of it."
"The data loss prevention feature is the most valuable. It stops our users from inadvertently leaking our customers' data to the Internet or anywhere else it shouldn't go."
"Whether you are in a hotel somewhere, or in Africa, it does not matter. You will get the Zscaler protection presence anywhere."
"There is no lag in service when accessing the internet."
 

Cons

"Infoblox BloxOne Threat Defense is quite expensive, especially due to the significant increase in the subscription fee after the first year. This unexpected increase was a problem for us."
"Endpoint solutions need to improved."
"The product could be cheaper."
"They could work on the UI of their website and make their website more user-friendly."
"The onboarding is a little rough at times, and you need to have some information at hand. It is pretty good, but it would be useful to have a few good examples to set up things like data exfiltration."
"The documentation needs to be improved because there are a lot of different models that it can be deployed in, and it's somewhat confusing determining what you need and how to set it up to best cover your use cases."
"Within the past two years, we discovered certain bugs in their products. The resolution of these bugs took a little too much time, especially if our production environment is down for a certain amount of time, then we are losing money. That is hard to convey to Infoblox support, e.g., we actually need the system up and running again within two or three hours. The awareness of these so-called production down incidents is not really easy to convey."
"The research side and the reporting side need improvement. Both of those are items on the menu. They could use a little bit of cleanup to make their respective information more easily understood."
"Zscaler Internet Access could improve by adding a VPN feature."
"There are some performance issues when we add on additional controls."
"We'd like for them to include some sort of antivirus tool."
"Zscaler should continue to make the user interface better. They should also improve the backup network and continue to expand it so that it can handle larger numbers of customers."
"The solution can be improved by advancing some of the newer technologies such as the DLP feature, and adding email security."
"The performance needs improvement. Some areas create performance issues and, depending on the use cases, require reconfiguration to perform again."
"I would like to see the ability to choose a pool of IPs for my company, set up rules based on them, and know that those IPs are not used by other companies."
"Another thing that I would like to see is if Zscaler could have a separate product for direct access. I looked at a private access solution, but I understand there's a separate product that isn't integrated with this."
 

Pricing and Cost Advice

"It is a very expensive system. You need to go over the licensing before purchase to make sure you're getting what is needed, not anything extra."
"Infoblox BloxOne offers pretty good documentation. Check its documentation, then do a PoC. Infoblox is very good at providing PoCs."
"When you buy the subscription, there are no additional costs to add any additional buttons."
"There is a significant charge for this product but I think that it's worth it when we look at what it's able to prevent."
"The licensing is set up such that you pay for the number of active users that you're defending at the moment."
"It's a pricey solution because it's for the advanced kind of customer."
"If you only wanted the DNS filtering and none of the other products built into Threat Defense, it would be nicer if they could do that a la carte since we are not really using a lot of the solution."
"Roughly, we might spend $70,000 a month on the solution. We don't pay for anything beyond the standard licensing fee."
"ZIA follows a subscription model pricing and charges you based on the number of users. I would say its price is good."
"Zscaler is an expensive solution, but it's worth the price. Their services are unmatched by competitors. Some may come with half the features that Zscaler can offer and be much cheaper. However, they do not have the global coverage that Zscaler has, and they will not provide the same low latencies and the same speeds that Zscaler can."
"There are multiple bundles: enterprise, business, and transformation. Transformation includes all the features, but recently I've seen a few more line items that are additional costs. Overall, it's expensive."
"Licenses are available on a per-host basis. Some features like sandboxing require an additional fee, but most standard features are included in the license."
"​Be aware that you will need to invest some time and money to adapt your environment for Zscaler (traffic redirection, software deployment, authentication, etc).​"
"The pricing is an issue. It is expensive compared to other firewalls on the market."
"The pricing for Zscaler Internet Access could be made cheaper."
report
Use our free recommendation engine to learn which Domain Name System (DNS) Security solutions are best for your needs.
849,686 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
14%
Government
8%
Manufacturing Company
6%
Educational Organization
21%
Computer Software Company
14%
Financial Services Firm
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Infoblox BloxOne Threat Defense?
The most valuable feature is policy redirecting and security reports.
What is your experience regarding pricing and costs for Infoblox BloxOne Threat Defense?
Infoblox BloxOne Threat Defense is quite expensive, especially due to the significant increase in the subscription fee after the first year. This unexpected increase was a problem for us.
What needs improvement with Infoblox BloxOne Threat Defense?
The UI performance could be better in the future, as sometimes there are delays. Additionally, DNS resolution speed could be improved to match that of Google DNS or Cloudflare DNS ( /products/cloud...
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zscaler Internet Access is a good option for carrying out multiple security functi...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify and manage cloud applications, protecting your sensitive data from exfiltration....
 

Also Known As

BloxOne Threat Defense, Infoblox ActiveTrust, Infoblox ActiveTrust Cloud
ZIA
 

Overview

 

Sample Customers

Council Rock School District, EagleView, Schneider Electric, Baptist Memorial Health Care, American University
Ulster-Greene ARC, BanRegio, HDFC, Ralcorp Holdings Inc., British American Tobacco, Med America Billing Services Inc., Lanco Group, Aquafil, Telefonica, Swisscom, Brigade Group
Find out what your peers are saying about Infoblox BloxOne Threat Defense vs. Zscaler Internet Access and other solutions. Updated: July 2020.
849,686 professionals have used our research since 2012.