Infoblox Threat Defense Administration Training (formerly BloxOne Threat Defense)
BloxOne Threat Defense is now called Infoblox Threat Defense. This two-day course shows you how to administer the DNS security solution from the Infoblox Portal: security policies, the DNS Forwarding Proxy service on NIOS-X servers, Infoblox Endpoint agents, exfiltration detection, domain investigations and reporting. Every topic is practiced in the lab. You leave able to protect laptops, servers and IoT devices at the point of DNS resolution, whether they sit in the office, at home or in the cloud.
Understand DNS-layer security and the hybrid architecture of Infoblox Threat Defense
Create and fine-tune security policies, custom lists and RPZs
Enable DNS Forwarding Proxy on a NIOS-X server and tie it to policies
Deploy Infoblox Endpoint agents and organize them into groups
Detect DNS-based data exfiltration with Threat Insight
Investigate domains with Dossier and watch for lookalike domains
Use threat, application discovery and web content reports
Program
Overview and Portal basics
DNS security and threat intelligence
Licensing and tokens
Security policies
Rules and custom lists
Custom RPZs
NIOS-X servers and DNS Forwarding Proxy
Enabling DFP
Replacing an offline server
Infoblox Endpoint
Installing and managing agents
Groups and policies
Detection and investigation
Threat Insight and exfiltration
Dossier
Lookalike domains
Reporting
Threat reports
Application and web content discovery
Prerequisites
Good understanding of DNS and TCP/IP networking
Basic network security knowledge; NIOS experience is a plus
Basic familiarity with Windows or macOS endpoints helps with the agent section
Target audience
Network and DNS administrators
Security engineers and analysts
SOC teams that want to use DNS telemetry
Security managers evaluating or leading a large-scale DNS security rollout
The exam
There is no proctored certification exam for this course. Infoblox builds a knowledge check into the training, and passing it automatically awards the “Infoblox Threat Defense – Knowledge Verified” digital badge on the Infoblox Education platform. The badge shows that you have mastered the administration concepts and can be shared on your professional profile. The NIOS DDI certifications (INO, INA, INE) are separate and belong to the NIOS courses.
Preparation tips
Test a policy in monitor mode before blocking
Replay the exfiltration lab to recognize a DNS tunneling pattern
Review the reports after each lab to link configuration and results
Frequently asked questions (FAQ)
Are BloxOne Threat Defense and Infoblox Threat Defense the same?
Yes. Infoblox renamed the product, and the matching course is now called Infoblox Threat Defense Administration. Older documentation and some job ads still use the BloxOne name.
How many days is the course?
Two days, according to Infoblox's training partner catalog. The older five-day BloxOne curriculum is no longer offered. The current curriculum is built around the Infoblox Portal and NIOS-X servers, and since late 2025 includes content on token-based licensing.
Is there a certification?
Not a proctored certification: a “Knowledge Verified” badge is issued after you pass the built-in knowledge check.
Do I need NIOS experience?
It is not essential but helps: Threat Defense integrates with NIOS environments and uses NIOS-X servers. If you already run a NIOS Grid, you will see how the two fit together in a hybrid architecture.
Which formats do you offer?
Live online, in person in Casablanca or on-site at your organization, in French or English. Each participant gets a lab environment to configure policies, agents and reports.