--- title: "Infoblox BloxOne Threat Defense" slug: "infoblox-bloxone-threat-defense" updated: 2025-03-14T17:02:48Z published: 2025-03-14T17:02:48Z canonical: "docs.databee.buzz/infoblox-bloxone-threat-defense" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Infoblox BloxOne Threat Defense The Infoblox BloxOne Platform uses AI and algorithms to track DNS threat actors and their activity. Infoblox enables you to deliver DNS services across physical, virtual and cloud environments at scale for simplified DevOps and faster speed to market. More information can be found at [Infoblox website](https://www.infoblox.com/). **Integration Method:** API **Tables**: DNS Activity (4003), Detection Finding (2004) This integration supports the following events. | **Event** | **Description** | | --- | --- | | DNS Events | Gives a list of DNS security policy hits. | | Threat Feeds | Gives the information on all threat feed objects on the account. | This integration supports the following versions. | Infoblox BloxOne Threat Defense API version | Threat Feeds - v1.0 DNS Event - v2.0 | | --- | --- | ## Prerequisites - The user should have access to the [Infoblox Bloxone Cloud Portal](https://csp.infoblox.com/) with Admin privileges for creating API keys. - The user should have access to the DataBee console. ## Configuration Overview 1. Generate a API key for the created user on the Infoblox BloxOne cloud portal. 2. Add the [Infoblox BloxOne](/user-manual/docs/infoblox-bloxone-threat-defense-integration-guide#databee-configuration) threat defense feed integration in the DataBee console with the required API token. | **DataBee Parameter** | **Infoblox Parameter** | | --- | --- | | Token | API Key | ## Infoblox BloxOne Configuration Start by creating an API Token for the integration. 1. Login to your Infoblox BloxOne cloud service portal which has admin privileges. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/infoblox-bloxone-threat-defense-mar2025-image-youdimk5.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A55Z&se=2026-10-30T13%3A22%3A55Z&sr=c&sp=r&sig=dzM%2FMcFoWUrNs6Gdlq3XUjnJnobXlTu5t6xqKhvs4fA%3D) 2. In the upper-right corner, hover to your name and then select **Profile**. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/infoblox-bloxone-threat-defense-mar2025-image-9opuqs0w.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A55Z&se=2026-10-30T13%3A22%3A55Z&sr=c&sp=r&sig=dzM%2FMcFoWUrNs6Gdlq3XUjnJnobXlTu5t6xqKhvs4fA%3D) 3. Click the **User** **API Keys** tab on the top and click **Create** to generate an API key. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/infoblox-bloxone-threat-defense-mar2025-image-cuewh5yy.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A55Z&se=2026-10-30T13%3A22%3A55Z&sr=c&sp=r&sig=dzM%2FMcFoWUrNs6Gdlq3XUjnJnobXlTu5t6xqKhvs4fA%3D) 4. In the pop-up specify the ‘Name’ and ‘Expires at’ date. Ensure that the expiration date is set to a later date in future as much as possible from the day you created this API key. Click on **Apply** and then click **Save & Close** button. ![A screenshot of a calendar AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/infoblox-bloxone-threat-defense-mar2025-image-23cd0980.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A55Z&se=2026-10-30T13%3A22%3A55Z&sr=c&sp=r&sig=dzM%2FMcFoWUrNs6Gdlq3XUjnJnobXlTu5t6xqKhvs4fA%3D) 5. You will see an “API Access Key Generated” on the top of the screen. Please make sure you copy and keep it on the trusted platform. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/infoblox-bloxone-threat-defense-mar2025-image-z9l67km7.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A55Z&se=2026-10-30T13%3A22%3A55Z&sr=c&sp=r&sig=dzM%2FMcFoWUrNs6Gdlq3XUjnJnobXlTu5t6xqKhvs4fA%3D) > [!NOTE] > Note: > > Make sure to copy and save API Key as it will not be shown again. ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/infoblox-bloxone-threat-defense-mar2025-image-tfky9i55.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A55Z&se=2026-10-30T13%3A22%3A55Z&sr=c&sp=r&sig=dzM%2FMcFoWUrNs6Gdlq3XUjnJnobXlTu5t6xqKhvs4fA%3D) 2. Search for the **Infoblox BloxOne Threat Defense** and click it as shown below. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/infoblox-bloxone-threat-defense-mar2025-image-mhik2fxq.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A55Z&se=2026-10-30T13%3A22%3A55Z&sr=c&sp=r&sig=dzM%2FMcFoWUrNs6Gdlq3XUjnJnobXlTu5t6xqKhvs4fA%3D) 3. Click on the **API Ingest** option for collection method as shown below. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/infoblox-bloxone-threat-defense-mar2025-image-vqn3c025.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A55Z&se=2026-10-30T13%3A22%3A55Z&sr=c&sp=r&sig=dzM%2FMcFoWUrNs6Gdlq3XUjnJnobXlTu5t6xqKhvs4fA%3D) 4. Enter feed contact information and click **Next.** ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/infoblox-bloxone-threat-defense-mar2025-image-8qsuuzy5.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A55Z&se=2026-10-30T13%3A22%3A55Z&sr=c&sp=r&sig=dzM%2FMcFoWUrNs6Gdlq3XUjnJnobXlTu5t6xqKhvs4fA%3D) 5. In the configuration page, confirm the following: - API Base URL: this is the base URL that DataBee will interact with. - Authorization Method: Bearer Token - Token: paste the **API Key** generated earlier in the Infoblox console. - Event types: preselected for all the event types that integration pulls. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/infoblox-bloxone-threat-defense-mar2025-image-wndtzvcv.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A55Z&se=2026-10-30T13%3A22%3A55Z&sr=c&sp=r&sig=dzM%2FMcFoWUrNs6Gdlq3XUjnJnobXlTu5t6xqKhvs4fA%3D) 1. Click **Submit.** ## Troubleshooting Tips - Ensure the token is pasted correctly. Since you cannot view the token after the 1st time, re-create the token, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed. - Ensure the Infoblox BloxOne scopes/permissions are correct. ##