F5 Networks BIG-IP Global Traffic Manager (GTM)

The F5 Networks BIG-IP Global Traffic Manager (GTM) helps users deploy domain name system security extensions (DNSSEC) protection for newly signed .com and other internet domain types.

By incorporating DNS security capabilities into their IT infrastructures, users can reduce the risks of threats such as cache poisoning, domain hijacking, man-in-the-middle and DNS redirection attacks. Defending against these specific attacks helps users mitigate the risk of customer data theft, fraud or other malicious activity.

With the help of F5 DNSSEC solutions, users can deliver secure, dynamically signed responses in real time for all internet domains, including the recently signed top-level .com domain.

As F5’s application delivery controllers intelligently process application traffic traversing the network, they are in a position to thwart many targeted attacks.

The joint solution incorporates the benefits of F5’s traditional ADN global traffic management and Infoblox’s DNS server and zone management capabilities. F5 BIG-IP solutions deliver automated, real-time DNSSEC signing, a particularly critical feature for dynamic zones that contain globally load-balanced DNS names. Users have flexible deployment options and can select which domains use F5’s real-time signing or Infoblox’s DNSSEC functionality.

To help organisations seamlessly bring their infrastructures up to speed, the solution includes default settings based on governmental guidelines, making DNSSEC enforcement simple and easy to manage by using a convenient turnkey implementation. While other DNSSEC solutions require complex and expensive manual provisioning of keys, F5 and Infoblox automate DNSSEC key generation, rollover and distribution.

With F5’s GSLB capabilities, organisations leveraging multiple and globally dispersed data centres can ensure high availability and centralised management capabilities without exposing their infrastructures to DNS-related attacks. F5’s real-time DNSSEC signing functionality lets organisations realise both the business benefits of GSLB and a high-performance, secure DNS infrastructure.