Transforming Network Security and Management: Microland's First-Ever Deployment of Infoblox BloxOne for a Leading Global Petrochemical Company

Overview

A leading global petrochemical company specializing in sustainable products sought to enhance its network infrastructure and DNS security to better manage and secure its vast IT environment. The company, renowned for its diverse portfolio in petrochemicals and fibers, faced challenges with its legacy DNS and DHCP systems, which were distributed and lacked centralized management. Microland was engaged to deploy an advanced SaaS-based Infoblox BloxOne DNS, DHCP, IPAM, and DNS Threat Defense security solution, aiming to address critical security threats and optimize network management.

Business Challenge

The client was facing several challenges related to its legacy DDI (DNS, DHCP, and IPAM) infrastructure across seven sites in Asia and three sites in Mexico:

• DNS: The existing Microsoft DNS servers lacked centralized management and visibility, leading to security gaps. The absence of modern DNS security features exposed the network to cyberattacks, including ransomware and phishing attempts.
• DHCP: Distributed across non-standard appliances, the DHCP infrastructure often suffered from downtime and operational inefficiencies due to a lack of failover capabilities.
• IP Address Management: The client had no centralized IPAM repository, resulting in a lack of clarity on IP allocation and ownership. This complicated tracking of IT assets and ensuring network hygiene.

Additionally, the client required a scalable solution that could be deployed across its global network with minimal downtime while addressing these operational challenges.

Microland Solution

Microland conducted a thorough assessment and implemented a phased approach to migrate the company to the Infoblox BloxOne solution. The solution involved:

1. Phase 1 – Deployment: New DDI hardware was set up and integrated with the existing network infrastructure.
2. Phase 2 – Configuration Migration: Existing configurations were extracted from legacy systems and adapted to the new Infoblox platform.
3. Phase 3 – Testing: Comprehensive testing was carried out with stakeholders to ensure functionality and compatibility.
4. Phase 4 – Migration: The final cutover was executed, migrating user traffic to the new system with no downtime.

The deployment included advanced DNS, DHCP, and IPAM solutions, integrating third-party syslog servers for log retention and SOC (Security Operations Center) surveillance. Automated alerts and notifications were configured, along with DNS threat defense and brand protection features. In addition to 10 sites (Asia and Mexico), this solution is to be further extended across 15 more US sites shortly.

Value Delivered

• DNS: Blocked over 43,000 malicious DNS queries and protected the client from phishing attacks and DNS volumetric threats. It also improved network security and end-user experience by restricting access to inappropriate content.
• DHCP: With automatic failover and redundancy, the solution ensured continuous service availability, reducing service interruptions and downtime.
• IPAM: Centralized IP address management increased visibility across global operations, allowing for seamless asset tracking and more efficient network management.
• Security & Compliance: Implementing SOC surveillance and log retention ensured compliance with regulatory requirements and mitigated security risks.
• Cost Efficiency: The SaaS-based deployment of BloxOne allowed for a highly scalable solution with reduced operational overhead.

This deployment has transformed the client’s network security, enabling centralized management and fortified DNS threat defense across all global sites.