Collect DNS Queries with Lumu Gateways and Infoblox

Collect DNS Queries with Lumu Gateways and Infoblox

In the scenario where your company uses Infoblox as a DNS server, you have the option to associate the traffic originating from your organization using Lumu's public IP addresses as DNS resolvers while illuminating threats, attacks, and adversaries coming from your network.

In this guide, we show how to configure Infoblox version 8.4+ for forwarding DNS queries to Lumu using a Gateway collector.

For configuring Infoblox with Lumu Virtual Appliance, consult Collect DNS queries with Lumu VA and Infoblox.

Requirements

  1. Infoblox NIOS version 8.4+.

Add a Public Gateway in the Lumu Portal

Remember to first register your public IP address or group of IPs as a Gateway for your company at the Lumu Portal before pointing your DNS to Lumu. 

Configuring DNS forwarders on Infoblox

1. From the main navigation menu, click Data Management and then select the DNS tab. In a Grid view, select the zone you want to configure and expand the toolbar on the right side of the application and click Grid DNS Properties.

2. Click the Forwarders tab, and in the panel that appears, click to add.

Infoblox Grid DNS PropertiesInfoblox Grid DNS Properties
 

3. Enter the Lumu DNS resolvers IPs or the Lumu Virtual Appliance IPs.

Adding forwarders in InfobloxAdding forwarders in Infoblox
Remember that the Lumu DNS resolvers IPv4 addresses are: 
50.17.0.10 
3.87.85.24

4. Click Save & Close to save the configuration, and click Restart if it appears at the top of the screen.

        • Related Articles

        • Collect DNS Queries with Lumu VA and Infoblox

          Requirements Infoblox NIOS version 8.4+. Admin access to specify syslog servers on Infoblox NIOS. The most recent version of the Lumu Virtual Appliance installed. You can check the current version of the virtual appliance using the following command: ...
        • Lumu Virtual Appliance DNS Queries Collectors Catalog

          In the following table, you will find a complete list of DNS Queries Collectors available for deployment as part of Lumu's Virtual Appliances. Collector Logo Collect DNS Queries with Lumu VA and Infoblox Collect DNS Queries with Lumu VA and Citrix ...
        • Using Lumu Public Gateways as Primary DNS Resolvers

          With Lumu Public Gateways you can associate part of the traffic originating from your organization using Lumu public IP addresses as DNS resolvers while illuminating threats, attacks, and adversaries coming from your network. This document will help ...
        • Point your DNS to Lumu

          To start taking advantage of Lumu Gateways, you need to configure your DNS resolver device to point all DNS requests to Lumu's IP addresses, substituting the automatic DNS servers provided by your internet service provider (ISP). Once you have ...
        • Set Lumu as primary network DNS Resolver on Virtual Appliances

          The Lumu Virtual Appliance (VA) offers a seamless way to integrate the network metadata of your entire enterprise into the Lumu platform. You can easily deploy and set up a Lumu Virtual appliance to collect DNS network metadata through the Virtual ...