Infoblox Launches Infoblox IQ, Transforming Network and Security Operations with Agentic AI

Infoblox has unveiled Infoblox IQ, an innovative operations layer designed to enhance network security and asset management through advanced data analytics. This new platform leverages authoritative data from DNS queries, DHCP leases, IP address assignments, device activity, and security events to streamline issue identification, automate investigations, and empower teams to act decisively.

Introduction of the Model Context Protocol (MCP)

The launch of Infoblox IQ is accompanied by the introduction of the Model Context Protocol (MCP) server, which integrates seamlessly with Infoblox’s security and networking solutions. Infoblox IQ features an agentic AI assistant that utilizes a natural language interface, enabling teams to quickly assess network and security conditions, investigate issues, receive actionable recommendations, and implement configuration changes without the need to navigate multiple consoles or sift through extensive operational data.

The MCP server enhances the accessibility of Infoblox’s network, security, and asset intelligence by providing a standardized interface for third-party AI assistants and applications. This open protocol eliminates the need for custom integrations, allowing organizations to connect their AI systems to Infoblox more efficiently.

Leveraging Decades of Experience

The intelligence underpinning Infoblox IQ is built on over 25 years of experience in managing mission-critical DNS, DHCP, and IP address management (DDI) environments for some of the largest organizations globally. The platform incorporates operational insights gained from thousands of customer deployments, enabling teams to diagnose issues, prioritize actions, and resolve problems with greater efficiency.

In a notable deployment, Infoblox IQ successfully reduced over 504,000 operational events to just 24 prioritized actions through agentic triage. Investigations that previously required 45 to 90 minutes of manual analysis were completed almost instantaneously, providing the necessary context for prompt action.

Enhancing Security and Network Operations

For security teams, Infoblox IQ significantly mitigates alert fatigue by automatically correlating threats, assets, users, devices, and network activity into a coherent investigation pathway. Network teams benefit from proactive identification of performance, configuration, and capacity issues before they impact users, along with guided remediation recommendations.

Beyond improving operational efficiency, Infoblox IQ establishes a crucial data foundation for organizations pursuing agentic and autonomous IT operations. Effective AI systems rely on accurate, continuously updated infrastructure data to understand the relationships between devices, users, applications, IP addresses, and network services. As the authoritative source for DDI and network asset intelligence, Infoblox IQ provides AI models and operational agents with trusted context, enhancing decision-making, reducing erroneous assumptions, and enabling reliable automation.

Key Capabilities of Infoblox IQ

Infoblox IQ offers agentic AI capabilities in several critical areas:

• Infoblox IQ for Threat Defense: This feature conducts agentic investigations of DNS security alerts, gathering evidence, analyzing activities, and determining root causes. It presents Security Operations Center (SOC) analysts with confirmed threats, affected users and devices, and recommended remediation actions. Thousands of alerts are distilled into prioritized findings that analysts can review and act upon within minutes.
• Infoblox IQ for DDI: This component proactively identifies network configuration and operational issues across Infoblox Universal DDI and Infoblox NIOS. It automatically collects and analyzes relevant data, provides root cause analysis within seconds, and offers guided remediation actions with a comprehensive audit trail—effectively handling 90 percent of the tasks a network operator would typically perform after a ticket is opened.

Insights from Leadership

Mukesh Gupta, Chief Product Officer at Infoblox, emphasized the foundational belief behind Infoblox IQ: that the data already held by Infoblox offers one of the clearest views of enterprise network activity. He noted that as organizations transition from AI pilots to real-world agentic operations, the infrastructure data these systems depend on must be both trusted and current. The rapid changes in DNS, DHCP, and IP Address Management (IPAM) now exceed manual management capabilities, and generic AI tools often lack the operational visibility necessary for reliable autonomous actions. Infoblox provides that essential visibility, transforming it into agentic operations that teams can rely on.

Scott Harrell, President and CEO of Infoblox, remarked on the critical role of DDI as the foundation of enterprise networks. He stated that as AI emerges as the next operating layer for enterprises, this foundation becomes increasingly vital. Infoblox IQ converts infrastructure data from a mere system of record into a dynamic system of action, enabling organizations to respond more effectively and harness the full potential of AI-driven operations. Companies that successfully implement AI will be those that ground their automation in trusted data, positioning Infoblox as a leader in this domain.

Availability and Future Developments

Infoblox IQ for Threat Defense is set to be generally available by the end of the month. Meanwhile, Infoblox IQ for DDI, the Infoblox IQ assistant, and the Infoblox MCP Server integration are currently accessible to early access customers, with general availability expected in fall 2026. For further details on Infoblox IQ, refer to the blog and visit the Infoblox website.

Source: securitymea.com

Keep reading for the latest cybersecurity developments, threat intelligence and breaking updates from across the Middle East.