Infoblox DDI sends information to Genian NAC using RPZ settings and monitoring-syslog features when a device attempts to access malicious sites. Genian NAC extracts information through log filtering, checks node information for the corresponding IP, and assigns tags and enforcement actions based on predefined risk levels.