VMworld 2013: NSX Security Solutions In Action - Deploying, Troubleshooting, and Monitoring for VMware NSX Service Composer
2 likes2,151 views
VMworld 2013 Azeem Feroz, VMware Sachin Vaidya, VMware Learn more about VMworld and register at http://www.vmworld.com/index.jspa?src=socmed-vmworld-slideshare
Ad
More Related Content
What's hot (20)
Similar to VMworld 2013: NSX Security Solutions In Action - Deploying, Troubleshooting, and Monitoring for VMware NSX Service Composer (20)
Ad
More from VMworld (20)
Ad
Recently uploaded (20)
VMworld 2013: NSX Security Solutions In Action - Deploying, Troubleshooting, and Monitoring for VMware NSX Service Composer
- 1. NSX Security Solutions In Action - Deploying, Troubleshooting, and Monitoring for VMware NSX Service Composer Azeem Feroz, VMware Sachin Vaidya, VMware SEC5318 #SEC5318
- 2. 22 Agenda Recap of NSX Service Composer Deployment – NSX Service Composer & Third-Party Solutions • DEMO Troubleshooting and Monitoring - Health Status, Failures, Recovery • DEMO
- 3. 33 3 Security Challenges: “Multiple Dashboards of Wonder” Vulnerability Mgmt System Antivirus System Firewall vCenter IDS System DLP System
- 4. 44 Security Challenges: Multi-console Deployment Multiple consoles to initiate deployment from. Each solution has multiple moving parts – virtual appliances, ESXi modules, in-guest drivers. Manual admin intervention on each host in a cluster.
- 5. 55 Security Challenges: Troubleshooting across multiple dashboards If a service goes down, where do you start with troubleshooting steps? Security solution or Virtualization solution? What if there was a configuration change in the infrastructure that caused an outage? How could this change be determined?
- 6. 66 Security Challenges: No orchestration between solutions Datacenter Internet AV IPS Firewall Data Sec Vuln. Mgmt Content Filtering
- 7. 77 The NSX Service Composer
- 8. 88 NSX Service Composer Security services can now be consumed more efficiently in the software-defined data center. Apply. Apply and visualize security policies for workloads, in one place. Automate. Automate workflows across different services, without custom integration. Provision. Provision and monitor uptime of different services, using one method.
- 9. 99 Provision. NSX Service Composer & Third-Party Solutions
- 10. 1010 NSX Manager NSX Manager Partner consoles McAfee Rapid7 vCenter ESX ESX ESX ESX Symantec Trend NSX UI Single Pane of Glass (for Deployment and Monitoring) ReducedComplexity LargestEcosystem Deployment Fabric UsersVMWare Partners NSX Service Composer: Deployment and Provisioning Palo Alto Networks Vulnerability Mgmt IDS/IPS Anti-malware, Anti-virus IDS/IPS, Anti- Malware Firewall
- 11. 1111 Demo – NSX Service Composer Deployment Management Compute Partner Mgmt. Consoles Registered Register Services Log in! Some services are pre- registered (Data Security, Identity, Trend Micro, Rapid 7, McAfee ) Register Symantec Antivirus Solution 1 Deploy Services Some services are pre- deployed (Data Security) Deploy Symantec Antivirus solution 2
- 13. 1313 Apply. NSX Service Composer: Security Ready for Consumption
- 14. 1414 NSX Service Composer: Security Ready for Consumption Security Groups WHAT you want to protect Members: VM, vNIC, network (virtual/Logical Switch, physical), Distributed Virtual PG, cluster, data center, Resource Pool, vApp, other containers, regex patterns etc Context: User identity, sensitive data, security posture HOW you want to protect it Security Policies Services: Firewall, antivirus, intrusion prevention, vulnerability management and more. Profiles: Security policies from VMware and third-party solutions that are defined by the security architect but implemented by the cloud operator. APPLY
- 15. 1515 NSX Service Composer: Apply.
- 16. 1616 NSX Service Composer: Apply.
- 17. 1717 NSX Service Composer Apply. Apply and visualize security policies for workloads, in one place. Automate. Automate workflows across different services, without custom integration. Provision. Provision and monitor uptime of different services, using one method.
- 18. 1818 Troubleshooting & Monitoring Health Status, Failures, Recovery
- 19. 1919 NSX Manager NSX Manager Partner Consoles McAfee Rapid7 vCenter ESX ESX ESX ESX Symantec Trend NSX UI Single Pane of Glass (for Deployment and Monitoring) ReducedComplexity StrongerEcosystem Deployment Fabric UsersVMWare Partners NSX Service Composer: Troubleshooting and Monitoring Palo Alto Networks NSX UI
- 20. 2020 Demo – NSX Service Composer - Troubleshooting Management Compute Partner Mgmt. Consoles Registered Register Services Log in! Some services are pre- registered (Data Security, Identity, Trend Micro, Rapid 7, McAfee ) Register Symantec Antivirus Solution 1 Deploy Services Shut down Symantec appliance Observe alarms generated. Resolve alarms Confirm resolution is successful 2 Troubleshoot deployment failures Shut down Symantec appliance Observe alarms generated. Resolve alarms Confirm resolution is successful 3
- 22. 2222 Demo – NSX Service Composer - Troubleshooting Management Compute Partner Mgmt. Consoles Registered Register Services Log in! Some services are pre- registered (Data Security, Identity, Trend Micro, Rapid 7, McAfee ) Register Symantec Antivirus Solution 1 Deploy Services Shut down Symantec appliance Observe alarms generated. Resolve alarms Confirm resolution is successful 2 Troubleshoot deployment failures Shut down Symantec appliance Observe alarms generated. Resolve alarms Confirm resolution is successful 3 Troubleshoot configuration compliance failures Create a policy that uses Symantec service and apply it to VMs on cluster Shut down Symantec appliance on the cluster Observe alarms showing up on the service composer 4
- 24. 2424 Automate. NSX Service Composer: Orchestrate between Third-Party Solutions
- 25. 2525 Service Composer – Automate. Datacenter Internet AV IPS Firewall Data Sec Vuln. Mgmt Content Filtering
- 26. 2626 Service Composer – Automate. SEC5750 - Security Automation Workflows with NSX • Gargi Keeling (VMWare) and Don Wood (McKesson) • Wednesday, August 28th, 10:00 AM – 11:00 AM – Moscone West, Room 3012
- 27. 2727 Recap: NSX Service Composer Apply. Apply and visualize security policies for workloads, in one place. Automate. Automate workflows across different services, without custom integration. Provision. Provision and monitor uptime of different services, using one method.
- 28. THANK YOU
- 30. NSX Security Solutions In Action - Deploying, Troubleshooting, and Monitoring for VMware NSX Service Composer Azeem Feroz, VMware Sachin Vaidya, VMware SEC5318 #SEC5318