Infoblox IQ for Threat Defense

Enhance your existing Tenable integration with Infoblox IQ for Threat Defense, which provides richer security context and actionable insights directly within your Tenable platform.

With Infoblox IQ for Threat Defense, downstream integrations are enriched with:

Richer threat context
Impacted asset and user information
Actionable recommendations
Faster investigation and response

These enhancements help security teams understand risk faster, identify the appropriate response owner, and accelerate remediation—all from the tools they already use.

Required Customer Action

If you are upgrading an existing integration, complete the following steps to enable Infoblox IQ for Threat Defense:

Step 1: Disable and then re-enable the existing traffic flow.
Step 2: Update the traffic flow from SOC Insights → IQ for Threat Defense.

Note: These steps are required for the traffic flow to receive the enhanced event data and capabilities provided by Infoblox IQ for Threat Defense.

The Infoblox IQ for Threat Defense integration with Tenable delivers seamless, real-time security events and alerts directly to the Tenable platform. This integration enables security teams to respond to security incidents more efficiently, improving overall operational efficiency and incident management.

With this solution, you can:

Reduce security alert fatigue.
Investigate and respond to the threats that matter most.
Stop threats before they occur by leveraging DNS threat intelligence.

Prerequisites

Valid Infoblox API Key
- To generate an API key, refer to Configuring User API Keys .
License entitlements for Data Connector, IQ for Threat Defense, and Ecosystem.
Access to the Tenable API using a valid API key.

Infoblox IQ for Threat Defense – ServiceNow