User manual VMWARE VSHIELD APP DATASHEET

[. . . ] DATA S H E E T VMware vShield App Protect Applications from Network-based Attacks AT A G L A N C E VMware vShield App, part of the VMware vShield family of virtualization security products, protects applications in the virtual datacenter from networkbased threats. vShield App gives organizations deep visibility into network communications between virtual machines and enables granular policy enforcement with security groups. [. . . ] ·Optimizehardwareresourceutilizationwhile maintaining strong security. ·Simplifycompliancewithcomprehensivelogging of all virtual machine network activity. How Does VMware vShield App Work? vShield App installs on each vSphere host, controlling and monitoring all network traffic on the host, even for packets that never cross a physical network interface card (NIC). vShield App can create and enforce policies based on administrator-defined, business-relevant security groups instead of physical boundaries or static assumptions about application deployments. vShield App provides a centralized interface that leverages vCenter Server to consistently apply these policies across multiple vSphere hosts in the virtual datacenter. How Is VMware vShield App Used? VMware vShield App enables granular policy enforcement using security groups. ·Eliminate blind spots ­ vShield App helps administrators define and enforce granular policies for all traffic that crosses a virtual NIC, increasing visibility over internal virtual datacenter traffic while helping to eliminate detours to physical firewalls. ·Maintain change-aware protection ­ vShield App helps to ensure that network topology changes do not impact application security with continuous firewall protection for virtual machines as they migrate from host to host. P R O D U C T DATA S H E E T / 1 VMware vShield App ·Efficiently manage dynamic policies ­ vShield App helps to simplify policy definition and provides administrators a rich context for defining and refining internal firewall policies as business needs evolve over time. ·Reduce botnet risks ­ vShield App helps security administrators protect against botnets and other attacks by dynamically allocating ports to trusted applications. ·Control access to shared resources ­ vShield App allows security administrators to restrict access to shared services such as storage and backup on vSphere hosts based on IP address. ·Accelerate IT compliance ­ vShield App increases visibility and control over virtual machine network security, providing the logging and auditing controls that enterprises need to demonstrate compliance with internal policies and external regulatory requirements. Flow Monitoring ·Abilitytoobservenetworkactivitybetweenvirtualmachines to help define and refine firewall policies, identify botnets and secure business processes through detailed reporting of application traffic (application, sessions, bytes) Security Groups ·Administrator-defined, business-relevantgroupingsofany virtual machines by their virtual NICs Policy Management ·Managementoffull-featuresthroughvShieldManager;many features also accessible through vCenter Server interface ·Policyenforcementonsecuritygroups, vCentergroupingsand TCP 5 tuple (source IP, destination IP, source port, destination port, protocol) ·Programmableinterfaceformanagementandpolicy enforcement using REST APIs ·Supportforintegrationwithenterprisesecuritymanagementtools Key Features Hypervisor-Level Firewall ·Inbound/outboundconnectioncontrolenforcedatthevirtual NIC level through hypervisor inspection, supporting multihomed virtual machines ·Abilitytoenforcebasedonnetwork, applicationport, protocol type (TCP, UDP), application type ·Dynamicprotectionasvirtualmachinesmigrate ·IP-basedstatefulfirewallandapplicationlayergatewayfor a broad range of protocols including Oracle, Sun Remote ProcedureCall(RPC), MicrosoftRPC, LDAPandSMTP; complete list of supported protocols in VMware vShield App Administration Guide Logging and Auditing ·Basedonindustry-standardsyslogformat ·AccessiblethroughRESTAPIsandvShieldManager ·Administratordefinedloggingon/offforfirewallsatrulelevel Find Out More For information or to purchase VMware products, call 877-4-VMWARE (outside of North America dial 650-427-5000), visit www. vmware. com/products, or search online for an authorized reseller. For detailed product specifications and systems requirements, refer to the VMware vShield App Administration Guide. VMware, Inc. 3401 Hillview Avenue Palo Alto CA 94304 USA Tel 877-486-9273 Fax 650-427-5001 www. vmware. com Copyright © 2010 VMware, Inc. [. . . ] All other marks and names mentioned herein may be trademarks of their respective companies. Item No: VMW_10Q3_DS_PROD_VSHIELD_APP_USLET_EN_R6 [. . . ]