VMware VSHIELD EDGE Manual de usuario

P R O D U C T D A T A S H E E T / 1

D A T A S H E E T

AT A G L ANCE

VMware vShield Edge, part of the vShield family

of virtualization security products, provides

comprehensive perimeter network security for

virtual datacenters. vShield Edge integrates

seamlessly with VMware vSphere™ and includes

essential network gateway services that

organizations can use to quickly and securely

scale their cloud infrastructures.

K E Y B E N E F I T S

•Reducecostandcomplexitybyeliminating

multiplespecial-purposeappliances,andby

rapidly provisioning network gateway services.

•Ensurepolicyenforcementwithbuilt-inedge

network security and services.

•Increasescalabilityandperformancewithone

edge per organization/tenant.

•SimplifyITcompliancewithdetailedlogging.

•Streamlinemanagementusingafull-featured

interface that integrates with VMware vCenter™

Server and leading enterprise security solutions.

VMware vShield Edge

Secure the Edge of the Datacenter

What Is VMware vShield

Edge?

VMware vShield Edge is an edge network security solution for

virtual datacenters that provides essential security capabilities

such as port group isolation, network security gateway services

and Web load balancing for performance and availability. The

solution plugs directly into vSphere and leverages built-in

features such as fault tolerance and high availability for

unparalleled resiliency.

Administrators can centrally manage vShield Edge through the

included vShield Manager console, which integrates seamlessly with

vCenter Server to facilitate uniﬁed security management for virtual

datacenters. vShield Edge also works in concert with VMware

VCloud Director to automate and accelerate the secure provisioning

of virtual datacenters in multi-tenant cloud infrastructures.

How Does VMware vShield

Edge Work?

Network Security Gateway

Deployed as a virtual appliance, vShield Edge provides ﬁrewall,

VPN, Web load balancer, NAT, and DHCP services to monitor

packet headers for source and destination IP addresses. Depending

on policy, it can deny or allow connections, initiate and terminate

VPN sessions, perform network address translation, or inspect

data by source/destination port and protocol type (TCP or UDP).

Port Group Isolation

When deployed as a loadable kernel module on vSphere, port

group isolation creates a barrier between the virtual machines

protected by vShield Edge and the external network. This has the

same eect as implementing VLANs but without the complexity

of trunking switch connections and deﬁning switch port mappings.

How Is VMware vShield

Edge Used?

•Consolidate edge security hardware – vShield allows

customers to provision edge security services using existing

vSphere resources, eliminating the need for edge security

hardware to “air gap” vSphere hosts.

VMware vShield Edge secures trac between virtual datacenters with built-in perimeter

security and port group isolation.

VMware, Inc. 3401 Hillview Avenue Palo Alto CA 94304 USA Tel 877-486-9273 Fax 650-427-5001 www.vmware.com

Copyright © 2010 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed

at http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be

trademarks of their respective companies. Item No: VMW_10Q3_DS_PROD_VSHIELD_EDGE_USLET_EN_R6

VMware vShield Edge

Web Load Balancing

•InboundloadbalancingforalltracincludingWebtrac

(HTTP, HTTPS)

•Round-robinalgorithm

•Supportfor“sticky”sessions

Port Group Isolation

•Enforcedathypervisorlayertorestricttracwithinavirtual

datacenter to speciﬁed port groups

•SameeectasVLANsinvirtualorphysicalswitchenvironments

Edge Flow Statistics

•Virtualdatacenterresourceutilizationmeteredandattributed

back to tenant

•StatisticsaccessiblethroughRESTAPIsandleveragedin

service provider chargeback applications

Policy Management

•Full-featuredmanagementthroughvShieldManager;many

features also accessible through vCenter Server interface

•CustomizableinterfaceformanagementusingRESTAPIs

•SupportforintegrationwithenterpriseITsecurity

management tools

Logging and Auditing

•Basedonindustrystandardsyslogformat

•AccessiblethroughRESTAPIsandvShieldManagerUI

•Administrator-denedloggingon/oforkeyedgesecurity

events (errors, warnings, etc.):

– Firewall: at rule level

– NAT: at rule level

– VPN: site-to-site connection name

– Web load balancer: At pool level, speciﬁc Web requests

including URL/folder

– DHCP: At service level, bindings (release/renewals)

Find Out More

ForinformationortopurchaseVMwareproducts,

call877-4-VMWARE(outsideofNorthAmericadial

650-427-5000), visit www.vmware.com/products,

orsearchonlineforanauthorizedreseller.Fordetailed

product speciﬁcations and systems requirements, refer

to the VMware vShield Edge Administration Guide

•Rapidly and securely provision virtual datacenter perimeters –

vShieldEdgeallowsorganizationstoeasilycreatesecure,

logical, hardware-independent perimeters (“edges”) around

virtual datacenter environments, making it easier to leverage

shared network resources in multi-tenant IT infrastructures.

•Protect data conﬁdentiality over shared networks – vShield

Edge provides site-to-site VPN with 256-bit encryption to

protect the conﬁdentiality of all data transmitted across

virtual datacenter perimeters.

•Ensure performance and availability of Web services –

vShieldEdgeecientlymanagesinboundWebtracacross

virtual machine clusters and includes Web load balancing

capabilities that customers can deploy in conjunction with

port group isolation and edge security, or on its own.

•Facilitate compliance management – vShield Edge provides

the necessary controls such as detailed event logging and ﬂow

statistics that enterprises need to demonstrate compliance with

corporate policies, along with industry and government regulations.

Key Features

Stateful Inspection Firewall

Inbound and outbound connection control with rules based on

the following parameters:

•IP address – source/destination IP address

•Ports – source/destination port

•Protocol – type (TCP or UDP)

Network Address Translation

•IPaddresstranslationto/fromthevirtualizedenvironment

•MasqueradingofvirtualdatacenterIPaddressesto

untrusted locations

Dynamic Host Conﬁguration Protocol

•AutomaticIPaddressprovisioningtovirtualmachinesin

vSphere environments

•Administrator-denedparameters(e.g.,addresspools,

lease times, dedicated IP addresses, etc.)

Site-to-Site VPN

•Securecommunicationbetweenvirtualdatacenters

(or edge security virtual machines)

•IPsecVPN,basedontheInternetKeyExchange(IKE)protocol

Otros manuales de Software de VMware

VMware

VMware THINAPP Manual de usuario

VMware

VMware VIEW 4.5 Guía de configuración rápida

VMware

VMware VIEW 4.5 - ARCHITECTURE PLANNING... Manual de usuario

VMware

VMware VLM3-ENG-CP - Lab Manager - PC Manual de usuario

VMware

VMware SPRINGSOURCE HYPERIC HQ Manual de usuario

VMware

VMware VCENTER APPLICATION DISCOVERY MANAGER 6.0 Manual de usuario

VMware

VMware VCENTER CONFIGURATION MANAGER 5.3 - VCENTER DISCOVERED MACHINES IMPORT TOOL... Manual de usuario

VMware

VMware VIEW 4.5 Manual

VMware

VMware VSHIELD APP 1.0.0 UPDATE 1 - API Manual

VMware

VMware SUSE LINUX ENTERPRISE SERVER Manual de usuario

VMware

VMware VCENTER APPLICATION DISCOVERY MANAGER 6.1.1 -... Manual de usuario

VMware

VMware VCENTER APPLICATION DISCOVERY MANAGER 6.1 -... Manual de instrucciones

VMware

VMware GLOBAL SUPPORT SERVICES Manual de usuario

VMware

VMware COMPLIANCE CHECKER - DATASHEET FOR PCI DSS... Manual de usuario

VMware

VMware VCM 5.3 - CONFIGURATION MANAGER SECURITY ENVIRONMENT... Guía rápida

VMware

VMware ESX 4.0 - GETTING STARTED UPDATE 1 Manual de usuario

VMware

VMware GSX Server 3 Administration Manual de instrucciones

VMware

VMware VC-VLM4-C - vCenter Lab Manager Manual de usuario

VMware

VMware CLOUD DIRECTOR 1.0 Manual de usuario

VMware

VMware DISK MOUNT UTILITY WORKSTATION 5.5 Manual de usuario

VMware

VMware VCLOUD SDK 1.0 - FOR NET DEVELOPERS GUIDE Manual de usuario

VMware

VMware vSphere 4 Manual de instalación y operación

VMware

VMware VSHIELD APP 1.0.0 UPDATE 1 - API Instrucciones de funcionamiento

VMware

VMware APPSPEED SERVER 1.5 - VCENTER APPSPEED INSTALLATION... Manual de usuario

Manuales populares de Software de otras marcas

COMPRO

COMPRO COMPROFM Manual de usuario

Muratec

Muratec OFFICEBRIDGE ONLINE Manual de usuario

Oracle

Oracle Contact Center Anywhere 8.1 Manual de usuario

Adobe

Adobe 65007312 - Photoshop Lightroom Manual

Avaya

Avaya NULL One-X for RIM Blackberry Manual de usuario

HP ProLiant BL420c Manual de usuario

PS Audio

PS Audio PowerPlay Manual del propietario

Brady

Brady LOCKOUT PRO 3.0 Manual de servicio

Avaya

Avaya Interaction Center Manual de usuario

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manual

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manual de usuario

Oracle

Oracle Application 9i Manual de usuario

Acer

Acer RDM Manual de usuario

Canon

Canon Vixia HF21 Manual de usuario

Canon

Canon ZR950 Manual de usuario

Samsung

Samsung Auto Backup Manual de usuario

Polycom

Polycom Vortex EF2201 Instrucciones de instalación y funcionamiento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manual de usuario