1. 1 | © 2013 Infoblox Inc. All Rights Reserved. 1 | © 2014 Infoblox Inc. All Rights Reserved. Control Your Network! Infoblox Overview Paul de Haan – Systems Engineer February 10 2014

2. 2 | © 2013 Infoblox Inc. All Rights Reserved. 2 | © 2014 Infoblox Inc. All Rights Reserved. Infoblox Overview & Business Update ($MM) Founded in 1999 Headquartered in Santa Clara, CA with global operations in 25 countries Market leadership Gartner “Strong Positive” rating 40%+ Market Share (DDI) 6,900+ customers, 64,000+ systems shipped 38 patents, 25 pending IPO April 2012: NYSE BLOX Leader in technology for network control Total Revenue (Fiscal Year Ending July 31) 30% CAGR

3. 3 | © 2013 Infoblox Inc. All Rights Reserved. 3 | © 2014 Infoblox Inc. All Rights Reserved. Infrastructure Security With Infoblox NETWORK INFRASTRUCTURE FIREWALLSSWITCHESROUTERSWEB PROXYLOAD BALANCERS Historical / Real-time Reporting & Control Historical / Real-time Reporting & Control APPS & END-POINTS END POINTSVIRTUAL MACHINESPRIVATE CLOUDAPPLICATIONS CONTROL PLANE Infoblox Grid TM w/ Real-time Network Database

4. 4 | © 2013 Infoblox Inc. All Rights Reserved. 4 | © 2014 Infoblox Inc. All Rights Reserved. Secure Secure hardware form-factor & hardened OS Designed to minimize vulnerabilities and attack surfaces Common Criteria certified Infoblox Value To Our Customers Grid TM technology for fault tolerance, easy updates and one-click DR Optimized for enterprise demand & performance Authoritative source for network data Available Powerful automation of manual processes Reduce change errors & assure compliance Save time, money and effort Automated Automated SecureAvailable

5. 5 | © 2013 Infoblox Inc. All Rights Reserved. 5 | © 2014 Infoblox Inc. All Rights Reserved. IP Address Management (IPAM) Network Services Network Automation Security Infoblox Grid ™ Real-time Network Database Infoblox Advanced Reporting The Infoblox Solution Portfolio IPAM Network Insight IPAM for Microsoft (Windows Server) IPAM for Microsoft System Center Orchestrator Infoblox DDI: (DNS, DHCP, IPAM) Load Balancer Manager NetMRI Switch Port Manager Security Device Controller Automation Change Manager Advanced DNS Protection DNS Firewall-FireEye Adapter DNS Firewall Subscriptions IPAM for VMware vCenter Orchestrator Physical & Virtual Appliances 3 rd Party Adapters

6. 6 | © 2013 Infoblox Inc. All Rights Reserved. 6 | © 2014 Infoblox Inc. All Rights Reserved. IP Address Management (IPAM) Network Services Network Automation Security Infoblox Grid ™ Real-time Network Database Infoblox Advanced Reporting New Products in Last 12 Months IPAM Network Insight IPAM for Microsoft (Windows Server) IPAM for Microsoft System Center Orchestrator Infoblox DDI: (DNS, DHCP, IPAM) Load Balancer Manager NetMRI Switch Port Manager Security Device Controller Automation Change Manager Advanced DNS Protection DNS Firewall-FireEye Adapter DNS Firewall Subscriptions IPAM for VMware vCenter Orchestrator Physical & Virtual Appliances 3 rd Party Adapters

7. 7 | © 2013 Infoblox Inc. All Rights Reserved. 7 | © 2014 Infoblox Inc. All Rights Reserved. Infoblox Appliances Families Trinzic 810 Trinzic 820 Trinzic 1410 Trinzic 1420 Trinzic 2210 Trinzic 2220 Network Automation 4000 Trinzic 4010 Trinzic 4030 Trinzic 100 Network Automation 2200 Network Automation 1400 Trinzic Reporting PT-4000 PT-2200 PT-1400 ND-1400 ND-800 ND-4000 ND-2200

8. 8 | © 2013 Infoblox Inc. All Rights Reserved. 8 | © 2014 Infoblox Inc. All Rights Reserved. Infoblox and Juniper – Network Insight

9. 9 | © 2013 Infoblox Inc. All Rights Reserved. ND Appliances are Grid Ready Agentless Management of Microsoft DNS/DHCP & Full AD Integration Cloud Orchestration Integration (VMware, BMC) Virtualization VMware Integration Microsoft DNS, DHCP Branch Office Reporting Server Integrated Advanced Reporting Engine Edge Network/ Remote Offices Branch Office HQ Grid Master Grid Master at Recovery Site Patented Grid Technology: Central Management, Authoritative DB Virtualization & Cloud Integration All Centrally Managed as ONE System ND Consolidator New Network Insight ND Appliance ND Probe New Network Insight ND Appliance

10. 10 | © 2013 Infoblox Inc. All Rights Reserved. Visibility into all configured networks IPAM view automatically indicates managed and unmanaged networks (highlighted in yellow) From the IPAM view select a network and view the infrastructure devices located on that network IPAM view automatically indicates managed and unmanaged networks (highlighted in yellow) From the IPAM view select a network and view the infrastructure devices located on that network

11. 11 | © 2013 Infoblox Inc. All Rights Reserved. You can’t fix what you don’t see Unknown devices identified in the network that are not in IPAM are flagged as Unmanaged enabling easy identification and fast action. (highlighted in yellow) Select an IP address to view more information about the switch port the device is connected too. Unknown devices identified in the network that are not in IPAM are flagged as Unmanaged enabling easy identification and fast action. (highlighted in yellow) Select an IP address to view more information about the switch port the device is connected too. A complete view of all interfaces, port speed, port type and VLANS on the port, admin status, and operation status

12. 12 | © 2013 Infoblox Inc. All Rights Reserved. 12 | © 2014 Infoblox Inc. All Rights Reserved. Infoblox and Juniper – BMP

13. Infoblox Network Automation Overview Network discovery Built-in analysis Check against best practices Detect issues Monitor and manage change Automate change Maintain compliance Provision ACL & rules Collected Via: SNMP CLI/configuration Syslog Fingerprinting Real-time & Historical Analysis © 2013 Infoblox Inc. All Rights Reserved.13

14. Change Management Automatic change detection Accurate job flow and control Every change at fingertips Saved historical configurations Simple side by side comparisons Powerful configuration search © 2013 Infoblox Inc. All Rights Reserved.14

15. Change Automation Embedded jobs and scripts Templates for easy customization Easily import existing Perl scripts Powerful variable- based jobs User-based, role access controls Scheduled and triggered jobs © 2013 Infoblox Inc. All Rights Reserved.15

16. © 2011 Infoblox Inc. All Rights Reserved. Bare Metal Provisioning Templates 16 Easily provision new network devices without truck rolls or on-site engineer requirements Easily provision new network devices without truck rolls or on-site engineer requirements

17. © 2011 Infoblox Inc. All Rights Reserved. Bare Metal Provisioning Templates 17 Create and lists customizable templates and define user device configuration options Create and lists customizable templates and define user device configuration options

18. 18 | © 2013 Infoblox Inc. All Rights Reserved. 18 | © 2014 Infoblox Inc. All Rights Reserved. Infoblox and Juniper – IF-MAP

19. © 2011 Infoblox Inc. All Rights Reserved. © 2009 Infoblox Inc. All Rights Reserved. IF-MAP: A Powerful Standard  IF-MAP = Interface to Metadata Access Points  An open protocol standard published (free) by the Trusted Computing Group –Available since April, 2008 –Version 2.0 released August, 2010 –Now shipping in products supplied by a growing list of vendors  Pub/sub database - Like Facebook for IP devices and systems  Supports a wide array of applications: –Multi-Vendor Network Security (NAC) –Network Infrastructure systems –Asset Management –Smart Grid –Network Automation / Cloud Computing Could do for data sharing what IP did for connectivity

20. © 2011 Infoblox Inc. All Rights Reserved. © 2009 Infoblox Inc. All Rights Reserved. Complex Costly Brittle High Maintenance Applications Management Supply Chain Mgmt Smart Grid CRM HR ERP CMDB SIEM Asset Mgmt IPAM Infrastructure Network Security DNS, DHCP AAA Switches Routers Building Controls Factory Controls Network Location The Pain: Sharing Data Across Disparate Systems SNMP, Syslog, Netflow Custom Integration – API’s, Scripts

21. © 2011 Infoblox Inc. All Rights Reserved. © 2009 Infoblox Inc. All Rights Reserved. IF-MAP Server Applications Management Supply Chain Mgmt Smart Grid CRM HR ERP CMDB SIEM Asset Mgmt IPAM Infrastructure Network Security DNS, DHCP AAA Switches Routers Building Controls Factory Controls Network Location IF-MAP Protocol (Publish, Subscribe, Search) IF-MAP Provides an Elegant, Open Approach for Data Sharing Automatically aggregates, correlates, and distributes data to and from different systems, in real time

22. © 2011 Infoblox Inc. All Rights Reserved. © 2009 Infoblox Inc. All Rights Reserved. Infoblox NIOS Appliances Support IF-MAP  Dynamically updates IF-MAP server when IPs are allocated, renewed, or released by NIOS DHCP server  Other systems can subscribe to updates and take action in real- time (e.g. discovery, configuration, scanning, open/close ports, etc.)  Unique to the Infoblox DHCP server (today) IF-MAP Server Infoblox NIOS Appliance DHCP Lease Information (IP, MAC, Start, Duration, etc.)

23. © 2011 Infoblox Inc. All Rights Reserved. © 2009 Infoblox Inc. All Rights Reserved. Use case – Access Control Problem Statement Problem:  A global company needs to prevent unauthorized devices from connecting at remote sites Requirements  Need to determine the right policy for different endpoints –Company-owned PCs, non-company PCs, non-PC devices (e.g. barcode scanners)  Access control system must not be complicated technically or for the end user –Cannot install software on these endpoints –Cannot require human interaction for network connectivity

24. © 2011 Infoblox Inc. All Rights Reserved. © 2009 Infoblox Inc. All Rights Reserved. Use Case – Solution for Policy-Based Remote Access Switch Infobox HA Pair DHCP/DNS Appliance Juniper IC Series UAC User= John Windows 802.1X Client 00:11:22:33:44:55 Private Applications AAA Juniper SSG Firewall identity = John Access- request = 113:3 MAP Database Authenticated -as Capability = access-private- applications MAC = 00:11:22: 33:44:55 IP= 192.0.2.7 IP-MAC 1- Endpoint plugs-in 2- SW sends EAP Start 3- Supplicant sends credentials 4- SW sends RADIUS Credential to UAC 5- UAC does Auth. Lookup 8- UAC sends RADIUS accept to SW 9- SW opens port 10- Endpoint requests DHCP 12-MAP sends IP- MAC to UAC 13- UAC activates L3 access on FW. 14- Endpoint generates traffic 192.0.2.7 Access- request- mac 6- UAC publishes To MAP 7- UAC subscribes to MAP 11-DHCP sends MAC-IP metadata to MAP IF-MAP CHANGE? CHANGE! MAP server

25. 25 | © 2013 Infoblox Inc. All Rights Reserved. 25 | © 2014 Infoblox Inc. All Rights Reserved. Thank you!