Control D vs. Infoblox

Choosing the right DNS protection comes down to more than just blocking threats. Pricing, features, analytics, and support all shape how a service fits into your business.

In this article, we compare Control D and Infoblox’s Threat Defense across these key areas to help you decide which solution better fits your needs.

Plans & Pricing

Infoblox offers four plans for its DNS product – called Infoblox Threat Defense – each with its own core feature set:

• Essentials
  • Deployment: On-prem appliance
  • Core Features: Basic DNS firewall (RPZ), block malware/C2/phishing, basic threat feeds
• Business Cloud
  • Deployment: Cloud-based
  • Core Features: All Essentials + centralized cloud firewall, richer threat feeds, threat insight
• Advanced
  • Deployment: Cloud (full)
  • Core Features: All Business + lookalike monitoring
• Advanced
  • Deployment: On-prem appliance grid
  • Core Features: Appliance DNS firewall, threat protection without cloud integration

In terms of cost, Infoblox does not disclose its pricing structure. Your exact quote will depend on the number of users, plan, support requirements, etc. For an accurate quote tailored to your precise needs, you’ll have to contact their sales department.

Control D, on the other hand, keeps things simple. There are no plans or tiers, meaning you gain access to Control D’s full feature set from the moment you sign up – no upgrades, no gated features, and no upsells.

Only a distinction is made between organization types, as this impacts cost:

• Enterprise – $2/Endpoint/month
• MSP – $1/Endpoint/month
• School/Non-Profit – eligible for a further discounted rate

General Features

Blockable Services

Both Infoblox and Control D go beyond simple category filtering by letting you block specific apps, tools, and platforms, but the scale is very different. 

Infoblox currently offers 469 blockable Services, 112 of which are Amazon-related (such as AWS AppSync, AWS Backup, and Amazon S3). 

Control D supports over 1,000 Services that can be blocked, bypassed, or redirected with a single toggle. This wider coverage gives you more flexibility for precise, fine-tuned access controls.

Traffic Redirection

Control D has a unique feature called Traffic Redirection. This lets you reroute DNS traffic through proxy servers in over 100 locations across more than 60 countries, allowing you to mask your IP address without needing a VPN. 

You can set a default routing location for all traffic or apply redirection rules to specific Services or domains. For example:

• Redirect general traffic through your primary US server while routing Amazon AWS through a European server
• Block all social media via a Filter, and set a redirect rule to only allow LinkedIn, but through a UK server

This added versatility gives you more control over how traffic is handled globally, combining performance, compliance, and access needs in one feature.

Geo-Custom Rules

Control D includes a feature called Geo-Custom Rules, which allows you to create policies based on where DNS traffic is coming from or going to. For example:

• Block queries resolving to IPs in a specific country or ASN
• Redirect queries that don't resolve to IPs in a specific country or ASN
• Bypass queries made from IPs in a specific country or ASN
• Block queries made from IPs not in a specific country or ASN
• Or any combination of the above

This is particularly useful if you want to block queries originating from high-risk regions, redirect traffic destined for a specific ASN to a proxy, or allow only traffic from approved networks. 

Infoblox does not currently offer an equivalent feature.

Full Modern DNS Protocol Support

Both Control D and Infoblox support encrypted DNS protocols, but while Infoblox offers DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT), Control D goes a step further by also supporting DNS-over-QUIC (DoQ) and the DNS-over-HTTPS/3 (DoH3).

Ad & Tracker Blocking

Control D includes built-in ad and tracker blocking, which is not offered by Infoblox. This feature removes ads and tracking domains before they load, making browsing faster, cleaner, and more private across all devices – not just in the browser. 

You can also fine-tune how aggressive the blocking is with three modes: Relaxed, Balanced, and Strict. This lets you strike the right balance between a smooth user experience while cutting down on distractions, improving privacy, and reducing potential risks from malicious ad networks. 

URL Filtering

One feature Infoblox offers is URL filtering. This enables you to block specific pages within a site rather than the entire domain. Control D does not have this capability.

Clients, Applications, and Integrations

Both Control D and Infoblox are evenly matched in this regard. However, there’s a key difference to keep in mind: API Access. 

With Infoblox, you get access to its API, but the data or features you can extract from it will depend on your plan. For example, pulling detailed SOC Insights data or accessing advanced analytics will require the Advanced plan.

On the flip side, Control D provides you with full API access from day one with no limitations on its capabilities. Automate tasks like Profile creation, policy management, Endpoint provisioning, IP rotation, and more.

Analytics & Reporting

Query Log Retention

Infoblox keeps raw DNS query data for up to 60 days within its portal, depending on the report type. 

Control D keeps full query logs for 7 days, which is shorter at the raw level, but then layers on longer-term reporting and analytics that extend overall visibility.

Report Retention

With Infoblox, reports are available for up to 60 days. Control D offers a broader reporting window, keeping hourly-resolution reports for 30 days and then shifting to daily summaries for up to a year.

Analytics Retention

Infoblox’s built-in analytics are limited to up to 60 days, after which exporting data is required for any extended lookback. Control D goes further by retaining analytics for up to a full year, giving you more built-in data to work with.

Security Event Log Retention

Infoblox also offers something called Security Event Logs, which capture records of threat-related events, such as when a query is blocked by malware, phishing, etc., along with the action taken. Infoblox retains these logs for up to 365 days.

Control D, on the other hand, doesn’t separate security events into a standalone log category. Instead, it rolls that information into its regular query and analytics data, which it keeps for up to a year.

Whether Security Event Logs are helpful or not will depend on your use case. Those who want a strong audit trail for long-term compliance records may find it useful. However, those looking to retain broader query and analytics data for a simpler way to monitor everyday DNS traffic and security outcomes may find it redundant.

(Custom) Data Storage Regions

Infoblox allows you to choose from two data storage regions: the United States (NA) and Germany (EU).

Control D offers three data storage regions: the United States (NA), the Netherlands (EU), and Australia (AU). But Control D goes a step further by giving you the ability to set up a custom storage region for a small additional fee. 

This can be especially useful for businesses that need to meet strict data residency or compliance rules, like keeping data inside a specific country, or for organizations that want more control over where their DNS logs and data live.

Support

Support Plans

Reliable support is essential for any DNS protection service. Infoblox addresses this with three BloxCare support plans, which must be purchased alongside its Threat Defense products if you want support:

• Standard – Business-hours support, access to knowledge base, community resources, and software updates
• Premium – All Standard features plus 24/7 global support and faster response times (shorter SLAs)
• Elite – All Premium features plus prioritized case handling, dedicated escalation channels, and the option to add a Technical Account Manager

These support tiers come at an additional cost, which can significantly increase your overall subscription price depending on the level you choose.

Control D takes a far simpler approach, with support being included from day one at no extra cost. You’re also paired with a dedicated Technical Account Manager by default, with direct access to Control D developers when necessary.

Advanced Chatbot

In addition to human support, Control D also offers a 24/7 AI-powered chatbot named Barry.

Trained on Control D’s full documentation and continuously improving through user interactions, Barry can answer 99% of questions instantly, whether it’s troubleshooting a configuration, fine-tuning filtering policies, or learning how to use a feature. 

This means less time spent digging through manuals or waiting for ticket responses. And if an issue goes beyond Barry’s scope, he can easily escalate your query to a human support agent.

Infoblox does not offer any form of chat support.

Final Thoughts

Infoblox offers a mature, enterprise-oriented platform with long-standing credibility, but it comes with higher costs, limited flexibility, and features gated behind multiple tiers and support add-ons.

Control D, on the other hand, provides enterprise-grade DNS protection without the enterprise cost or fluff. It focuses on simplicity, transparency, and accessibility, with full feature access and support from day one, making it easier for businesses of all sizes to deploy and manage without expensive upgrades.

Ultimately, the best choice depends on your organization’s needs. If you require legacy on-prem deployments and are already invested in Infoblox infrastructure, Threat Defense may be a fit. But for modern, flexible, and cost-effective DNS protection that prioritizes usability without sacrificing power, Control D stands out as the stronger option.