Feeds

Virtual security: Even better than the real thing?

The jury's still out

The essential guide to IT transformation

The edge product is a network gateway that provides firewalling, DHCP, VPN, load balancing, and other typical functions that you’d find in a hardware-based gateway appliance. vShield App protects individual applications hosted in VMs by monitoring network traffic between virtual machines to maintain separation and enforce isolation policies. It’s sort of a virtual ‘air gap’ that takes the place of physically isolating systems. The endpoint package is an antivirus solution that uses a secure VM to handle inspection chores for the entire host.

In my casting around looking for perspective on vShield and VMware’s security strategy, I found these blog posts by Chris Hoff. He’s a renaissance geek with 20 years of IT security experience and, as he puts it, “a passion for virtualization and all things cloud.” He had me at “My life? It’s like Blade Runner meets Beautiful Mind w/some Patrick Swayze Roadhouse violence mixed in.”

He’s currently the director of cloud/virtualization security stuff at Cisco, but that doesn’t seem to color his opinions or much of anything else in his blog. Here are his first and second takes on VMware’s vShield offerings.

It’s going to be interesting to see the uptake of vShield. While I have questions, I think that this move by VMware is important – and a pretty good strategy. Many of the questions that customers have about cloud (both internal and external) revolve around security, and these offerings show that VMware sees security as a crucial part of its product set.

It also gives VMware significant differentiation from Microsoft, Xen, and KVM offerings. Of course, it puts it at odds with others in the industry, including anyone who makes a gateway or security appliance. It also moves it into the enterprise systems management space, where the lineup of rivals includes Tivoli, CA, HP, and a host of other players. ®

Boost IT visibility and business value

More from The Register

next story
Pay to play: The hidden cost of software defined everything
Enter credit card details if you want that system you bought to actually be useful
Shoot-em-up: Sony Online Entertainment hit by 'large scale DDoS attack'
Games disrupted as firm struggles to control network
HP busts out new ProLiant Gen9 servers
Think those are cool? Wait till you get a load of our racks
Silicon Valley jolted by magnitude 6.1 quake – its biggest in 25 years
Did the earth move for you at VMworld – oh, OK. It just did. A lot
VMware's high-wire balancing act: EVO might drag us ALL down
Get it right, EMC, or there'll be STORAGE CIVIL WAR. Mark my words
Forrester says it's time to give up on physical storage arrays
The physical/virtual storage tipping point may just have arrived
prev story

Whitepapers

Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Backing up distributed data
Eliminating the redundant use of bandwidth and storage capacity and application consolidation in the modern data center.
The essential guide to IT transformation
ServiceNow discusses three IT transformations that can help CIOs automate IT services to transform IT and the enterprise
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.