All the Active Directory benefits, none of the Microsoft complexity.
Active Directory is an essential element of the Windows server architecture. It provides a centrally managed directory service for distributed computing environments.
However, many IT organizations believe that Active Directory is required to be integrated with Windows DNS server, but that’s not the case. The connection between the two is actually more circumstantial than anything.
Windows Server DNS architectures and capabilities create numerous challenges, including a high risk of human error, replication problems, a lack of effective delegation controls or auditing, maintenance challenges, and overly complex DNS topologies based on Active Directory.
BlueCat delivers higher performance, less complexity, eliminates human errors through robust validation and adds significant technical and security capabilities not found in Microsoft Windows.
Interoperate with Active Directory DNS
BlueCat has worked with a number of former Microsoft customers who still use Active Directory. Quite often, BlueCat customers who still use it will implement and forward to BlueCat DNS for domains other than Active Directory.
Replace Microsoft DNS/DHCP
Like most things Microsoft, there is always a breaking point when it comes to size and scale. Environments with a large number of Active Directory forests come with many complexities, and with complexity comes limitations. Complex trusts between AD forests, poorly configured Microsoft DNS services, and missing forwarders, just to name a few.
Customers will then often replace Microsoft DNS with BlueCat DNS due to our robust and integrated platform for Active Directory DNS. It also easily integrates into the Active Directory environment to support existing Microsoft deployments when not using Windows for DNS and DHCP.
Administrators can create the Active Directory zones in BlueCat Address Manager, enabling dynamically updated resource records. Once complete, the configuration is deployed and Active Directory servers can be configured to use a BlueCat DNS/DHCP Server.
The benefits of BlueCat Enterprise DNS will grow with the business, serving as the central point for administration and enabling orchestration and automation initiatives.
Active Directory and GSS-TSIG
BlueCat supports a wide variety of interoperability scenarios with Active Directory using GSS-TSIG and provides more granular update security policies than Windows Server DNS can support natively. These include update policies that specify which GSS-TSIG attributes to identify update clients, and explicit controls on which record types that client can update.
“We initially chose BlueCat to avoid the ‘worst case,’ a costly DNS or DHCP outage that would cripple our network, delay our production and put our business at risk. BlueCat is also saving us administration time and effort. With our previous Microsoft solution, there was more work for our staff to do each week to administer the DHCP service.”Markus Vetter System Administrator, Tyrolit