VMware VSHIELD EDGE Manuel utilisateur

P R O D U C T D A T A S H E E T / 1

D A T A S H E E T

AT A G L ANCE

VMware vShield Edge, part of the vShield family

of virtualization security products, provides

comprehensive perimeter network security for

virtual datacenters. vShield Edge integrates

seamlessly with VMware vSphere™ and includes

essential network gateway services that

organizations can use to quickly and securely

scale their cloud infrastructures.

K E Y B E N E F I T S

•Reducecostandcomplexitybyeliminating

multiplespecial-purposeappliances,andby

rapidly provisioning network gateway services.

•Ensurepolicyenforcementwithbuilt-inedge

network security and services.

•Increasescalabilityandperformancewithone

edge per organization/tenant.

•SimplifyITcompliancewithdetailedlogging.

•Streamlinemanagementusingafull-featured

interface that integrates with VMware vCenter™

Server and leading enterprise security solutions.

VMware vShield Edge

Secure the Edge of the Datacenter

What Is VMware vShield

Edge?

VMware vShield Edge is an edge network security solution for

virtual datacenters that provides essential security capabilities

such as port group isolation, network security gateway services

and Web load balancing for performance and availability. The

solution plugs directly into vSphere and leverages built-in

features such as fault tolerance and high availability for

unparalleled resiliency.

Administrators can centrally manage vShield Edge through the

included vShield Manager console, which integrates seamlessly with

vCenter Server to facilitate uniﬁed security management for virtual

datacenters. vShield Edge also works in concert with VMware

VCloud Director to automate and accelerate the secure provisioning

of virtual datacenters in multi-tenant cloud infrastructures.

How Does VMware vShield

Edge Work?

Network Security Gateway

Deployed as a virtual appliance, vShield Edge provides ﬁrewall,

VPN, Web load balancer, NAT, and DHCP services to monitor

packet headers for source and destination IP addresses. Depending

on policy, it can deny or allow connections, initiate and terminate

VPN sessions, perform network address translation, or inspect

data by source/destination port and protocol type (TCP or UDP).

Port Group Isolation

When deployed as a loadable kernel module on vSphere, port

group isolation creates a barrier between the virtual machines

protected by vShield Edge and the external network. This has the

same eect as implementing VLANs but without the complexity

of trunking switch connections and deﬁning switch port mappings.

How Is VMware vShield

Edge Used?

•Consolidate edge security hardware – vShield allows

customers to provision edge security services using existing

vSphere resources, eliminating the need for edge security

hardware to “air gap” vSphere hosts.

VMware vShield Edge secures trac between virtual datacenters with built-in perimeter

security and port group isolation.

VMware, Inc. 3401 Hillview Avenue Palo Alto CA 94304 USA Tel 877-486-9273 Fax 650-427-5001 www.vmware.com

Copyright © 2010 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed

at http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be

trademarks of their respective companies. Item No: VMW_10Q3_DS_PROD_VSHIELD_EDGE_USLET_EN_R6

VMware vShield Edge

Web Load Balancing

•InboundloadbalancingforalltracincludingWebtrac

(HTTP, HTTPS)

•Round-robinalgorithm

•Supportfor“sticky”sessions

Port Group Isolation

•Enforcedathypervisorlayertorestricttracwithinavirtual

datacenter to speciﬁed port groups

•SameeectasVLANsinvirtualorphysicalswitchenvironments

Edge Flow Statistics

•Virtualdatacenterresourceutilizationmeteredandattributed

back to tenant

•StatisticsaccessiblethroughRESTAPIsandleveragedin

service provider chargeback applications

Policy Management

•Full-featuredmanagementthroughvShieldManager;many

features also accessible through vCenter Server interface

•CustomizableinterfaceformanagementusingRESTAPIs

•SupportforintegrationwithenterpriseITsecurity

management tools

Logging and Auditing

•Basedonindustrystandardsyslogformat

•AccessiblethroughRESTAPIsandvShieldManagerUI

•Administrator-denedloggingon/oforkeyedgesecurity

events (errors, warnings, etc.):

– Firewall: at rule level

– NAT: at rule level

– VPN: site-to-site connection name

– Web load balancer: At pool level, speciﬁc Web requests

including URL/folder

– DHCP: At service level, bindings (release/renewals)

Find Out More

ForinformationortopurchaseVMwareproducts,

call877-4-VMWARE(outsideofNorthAmericadial

650-427-5000), visit www.vmware.com/products,

orsearchonlineforanauthorizedreseller.Fordetailed

product speciﬁcations and systems requirements, refer

to the VMware vShield Edge Administration Guide

•Rapidly and securely provision virtual datacenter perimeters –

vShieldEdgeallowsorganizationstoeasilycreatesecure,

logical, hardware-independent perimeters (“edges”) around

virtual datacenter environments, making it easier to leverage

shared network resources in multi-tenant IT infrastructures.

•Protect data conﬁdentiality over shared networks – vShield

Edge provides site-to-site VPN with 256-bit encryption to

protect the conﬁdentiality of all data transmitted across

virtual datacenter perimeters.

•Ensure performance and availability of Web services –

vShieldEdgeecientlymanagesinboundWebtracacross

virtual machine clusters and includes Web load balancing

capabilities that customers can deploy in conjunction with

port group isolation and edge security, or on its own.

•Facilitate compliance management – vShield Edge provides

the necessary controls such as detailed event logging and ﬂow

statistics that enterprises need to demonstrate compliance with

corporate policies, along with industry and government regulations.

Key Features

Stateful Inspection Firewall

Inbound and outbound connection control with rules based on

the following parameters:

•IP address – source/destination IP address

•Ports – source/destination port

•Protocol – type (TCP or UDP)

Network Address Translation

•IPaddresstranslationto/fromthevirtualizedenvironment

•MasqueradingofvirtualdatacenterIPaddressesto

untrusted locations

Dynamic Host Conﬁguration Protocol

•AutomaticIPaddressprovisioningtovirtualmachinesin

vSphere environments

•Administrator-denedparameters(e.g.,addresspools,

lease times, dedicated IP addresses, etc.)

Site-to-Site VPN

•Securecommunicationbetweenvirtualdatacenters

(or edge security virtual machines)

•IPsecVPN,basedontheInternetKeyExchange(IKE)protocol

Autres manuels VMware Logiciel

VMware

VMware COMPLIANCE CHECKER - DATASHEET FOR PCI DSS... Manuel utilisateur

VMware

VMware VCLOUD SDK 1.0 - FOR NET DEVELOPERS GUIDE Manuel utilisateur

VMware

VMware VSHIELD APP 1.0.0 UPDATE 1 - API Manuel

VMware

VMware CONVERTER STANDALONE 4.3 Manuel utilisateur

VMware

VMware VC-VLM4-C - vCenter Lab Manager Manuel utilisateur

VMware

VMware VSHIELD ENDPOINT Manuel utilisateur

VMware

VMware FUS3-ENG-M-10-CP - Fusion For Mac OS X Manuel utilisateur

VMware

VMware VSHIELD APP 1.0.0 UPDATE 1 - API Manuel utilisateur

VMware

VMware 454885-B21 - Lab Manager Standard Foundation... Manuel utilisateur

VMware

VMware VCLOUD SDK FOR JAVA 1.0 - DEVELOPER S GUIDE Manuel utilisateur

VMware

VMware CLOUD DIRECTOR 1.0 Manuel

VMware

VMware VCENTER CONFIGURATION MANAGER Guide rapide

VMware

VMware VSHIELD APP 1.0.0 UPDATE 1 - API Mode d'emploi

VMware

VMware VCENTER CONFIGURATION MANAGER 5.3 Manuel utilisateur

VMware

VMware APPSPEED SERVER 1.5 - VCENTER APPSPEED INSTALLATION... Manuel utilisateur

VMware

VMware ESX 4.0 - GETTING STARTED UPDATE 1 Manuel utilisateur

VMware

VMware VCENTER APPLICATION DISCOVERY MANAGER 6.1.1 -... Manuel utilisateur

VMware

VMware ACE Manuel d'utilisation et d'entretien

VMware

VMware VCENTER APPLICATION DISCOVERY MANAGER 6.1 -... Manuel utilisateur

VMware

VMware SUSE LINUX ENTERPRISE SERVER Manuel utilisateur

VMware

VMware VCLOUD REQUEST MANAGER 1.0.0 Manuel utilisateur

VMware

VMware VLM3-ENG-CP - Lab Manager - PC Manuel utilisateur

VMware

VMware VCLOUD REQUEST MANAGER 1.0.0 Manuel utilisateur

VMware

VMware VCENTER APPLICATION DISCOVERY MANAGER 6.1.1 -... Mode d’emploi

Manuels Logiciel populaires d'autres marques

COMPRO

COMPRO COMPROFM Manuel utilisateur

Muratec

Muratec OFFICEBRIDGE ONLINE Manuel utilisateur

Oracle

Oracle Contact Center Anywhere 8.1 Manuel utilisateur

Adobe

Adobe 65007312 - Photoshop Lightroom Manuel

Avaya

Avaya NULL One-X for RIM Blackberry Manuel utilisateur

HP ProLiant BL420c Manuel utilisateur

PS Audio

PS Audio PowerPlay Manuel du propriétaire

Brady

Brady LOCKOUT PRO 3.0 Manuel de service

Avaya

Avaya Interaction Center Manuel utilisateur

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuel

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuel utilisateur

Oracle

Oracle Application 9i Manuel utilisateur

Acer

Acer RDM Manuel utilisateur

Canon

Canon Vixia HF21 Manuel utilisateur

Canon

Canon ZR950 Manuel utilisateur

Samsung

Samsung Auto Backup Manuel utilisateur

Polycom

Polycom Vortex EF2201 Instructions d'installation et d'utilisation

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuel utilisateur