Infoblox Metric

Threat Defense Security Token

Catalog row in Vendor License Metrics · Cited

Unit: Security Token
Definition: Token type that licenses core Threat Defense capabilities: Threat Defense Cloud, Threat Defense for NIOS, IQ for Threat Defense, Dossier, Lookalike Domain Monitoring and SOC Insights. The FAQ describes tokens as an entitlement level, not credits that are spent.
Counting rules: Compliance uses a rolling three-month average of monthly high-water marks compared with purchased tokens; above it the account is subject to True Forward.
Applies to products: Infoblox Threat Defense
Infoblox IQ for Threat Defense
Dossier
Related metrics: Protected asset (Threat Defense Cloud)
Threat Defense for NIOS Grid Member (by appliance model)
Dossier queries per day
Monitored lookalike domain
Product category: Network Security Software

Evidence 6

Exceeding Threat Defense tokens does not switch protection off

"There is no hard enforcement that suddenly blocks DNS security when you cross a threshold."

Threat Defense Tokens FAQ, Q15Infoblox Threat Defense Tokens: Customer FAQsRetrieved 2026-10-12

Google Cloud DNS Armor and AWS Managed Rules do not use Infoblox tokens

"They do not consume Security Tokens or Reporting Tokens."

Threat Defense Tokens FAQ, Q18Infoblox Threat Defense Tokens: Customer FAQsRetrieved 2026-10-12

IQ for Threat Defense and SOC Insights each need 35 percent extra Cloud tokens

"The quantity of tokens allocated will be 35% of the quantity of tokens that an organization buys for Threat Defense Cloud Protected Assets."

Threat Defense Token-Based Licensing, Security Token Add-onsThreat Defense Token-Based LicensingRetrieved 2026-10-12

IQ Services rights are coextensive with the underlying Product and do not train generative AI

"Customer’s rights in the IQ Services are coextensive with, and do not expand, Customer’s rights in those underlying Products."

IQ Addendum, introduction and section 1Infoblox IQ Addendum to MCARetrieved 2026-10-12

Threat Defense Cloud uses three Security Tokens per protected asset

"These assets are licensed and are allowed up to 3,500 DNS queries per day."

Threat Defense Token-Based Licensing, Security Tokens for Threat Defense CloudThreat Defense Token-Based LicensingRetrieved 2026-10-12

Threat Defense compliance is a rolling three-month average of monthly peaks

"A rolling three‑month average of those monthly high‑water marks is then compared to the number of tokens you have licensed for that token type."

Threat Defense Tokens FAQ, Q8 and Q14Infoblox Threat Defense Tokens: Customer FAQsRetrieved 2026-10-12

Infoblox Threat Defense Tokens: Customer FAQsProduct guide · retrieved 2026-10-12
Threat Defense Token-Based LicensingProduct guide · retrieved 2026-10-12
Infoblox IQ Addendum to MCAProduct terms · retrieved 2026-10-12