Page | 2
Chapter 23: VMware vShield End-point
Introduction
There are many security technologies available in the market, and not to be
outdone VMware has its own called “vShield”. It’s quite a broad technology that
has applications above and beyond the topic of this book – virtual desktops. For
example vShield forms a critical part of VMware’s “vCloud Director” their cloud
automation platform. In that case vShield allows for vSphere and vCloud
Director to support a secure multi-tenancy model where every organization
within its boundaries resides in its own network bubble.
In terms of VMware Horizon View, vShield can contribute to improving the user
experience and overall scalability of the View Infrastructure by offloading anti-
virus workloads to vShield. A good analogy for this resides in the arena of
backup. In the early years of virtualization many companies persisted in install
backup agents to VMs and treating them the same as physicals – in fact this
approach persists to this day. Unfortunately, doing so puts an unnecessary CPU
and network load on the ESX host. It’s perhaps more sophisticated and efficient
to backup outside of VM – or so-called VM Backup. You could say vShield
Endpoint is doing the same for AV that VM Backup pioneered by the likes of
VizionCore (now part of Quest Software, now part of Dell!) and Veeam did for
backup. Sadly, there’s little in the way of truly independent comparisons
between traditional in-guest agent-based AV and vShield – with nearly all the
reports being sponsored in some shape or form by the vendors. But if you are
looking for good summary the Tolly Group often have this type of
compare/contrast data. A good place to start looking is here:
http://blogs.vmware.com/security/2011/03/security-conference-followup.html
Some of the performance information is now out of date since the 5.0 and 5.0.1
release of vShield that introduce architectural changes that should improve
these base performance figures.
vShield is available in number of formats individually in an “a la carte” fashion or
it can be procured as an all-in-one purchase. These are individual components:
• vShield Manager
“Installs” as virtual appliance and optionally can be registered with
vCenter – it acts the central management point for different functions of
vShield App
• vShield App
Firewall capabilities with the ability to set policies based on objects within
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentários a estes Manuais