VMware VSHIELD EDGE Bedienungsanleitung

P R O D U C T D A T A S H E E T / 1

D A T A S H E E T

AT A G L ANCE

VMware vShield Edge, part of the vShield family

of virtualization security products, provides

comprehensive perimeter network security for

virtual datacenters. vShield Edge integrates

seamlessly with VMware vSphere™ and includes

essential network gateway services that

organizations can use to quickly and securely

scale their cloud infrastructures.

K E Y B E N E F I T S

•Reducecostandcomplexitybyeliminating

multiplespecial-purposeappliances,andby

rapidly provisioning network gateway services.

•Ensurepolicyenforcementwithbuilt-inedge

network security and services.

•Increasescalabilityandperformancewithone

edge per organization/tenant.

•SimplifyITcompliancewithdetailedlogging.

•Streamlinemanagementusingafull-featured

interface that integrates with VMware vCenter™

Server and leading enterprise security solutions.

VMware vShield Edge

Secure the Edge of the Datacenter

What Is VMware vShield

Edge?

VMware vShield Edge is an edge network security solution for

virtual datacenters that provides essential security capabilities

such as port group isolation, network security gateway services

and Web load balancing for performance and availability. The

solution plugs directly into vSphere and leverages built-in

features such as fault tolerance and high availability for

unparalleled resiliency.

Administrators can centrally manage vShield Edge through the

included vShield Manager console, which integrates seamlessly with

vCenter Server to facilitate uniﬁed security management for virtual

datacenters. vShield Edge also works in concert with VMware

VCloud Director to automate and accelerate the secure provisioning

of virtual datacenters in multi-tenant cloud infrastructures.

How Does VMware vShield

Edge Work?

Network Security Gateway

Deployed as a virtual appliance, vShield Edge provides ﬁrewall,

VPN, Web load balancer, NAT, and DHCP services to monitor

packet headers for source and destination IP addresses. Depending

on policy, it can deny or allow connections, initiate and terminate

VPN sessions, perform network address translation, or inspect

data by source/destination port and protocol type (TCP or UDP).

Port Group Isolation

When deployed as a loadable kernel module on vSphere, port

group isolation creates a barrier between the virtual machines

protected by vShield Edge and the external network. This has the

same eect as implementing VLANs but without the complexity

of trunking switch connections and deﬁning switch port mappings.

How Is VMware vShield

Edge Used?

•Consolidate edge security hardware – vShield allows

customers to provision edge security services using existing

vSphere resources, eliminating the need for edge security

hardware to “air gap” vSphere hosts.

VMware vShield Edge secures trac between virtual datacenters with built-in perimeter

security and port group isolation.

VMware, Inc. 3401 Hillview Avenue Palo Alto CA 94304 USA Tel 877-486-9273 Fax 650-427-5001 www.vmware.com

Copyright © 2010 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed

at http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be

trademarks of their respective companies. Item No: VMW_10Q3_DS_PROD_VSHIELD_EDGE_USLET_EN_R6

VMware vShield Edge

Web Load Balancing

•InboundloadbalancingforalltracincludingWebtrac

(HTTP, HTTPS)

•Round-robinalgorithm

•Supportfor“sticky”sessions

Port Group Isolation

•Enforcedathypervisorlayertorestricttracwithinavirtual

datacenter to speciﬁed port groups

•SameeectasVLANsinvirtualorphysicalswitchenvironments

Edge Flow Statistics

•Virtualdatacenterresourceutilizationmeteredandattributed

back to tenant

•StatisticsaccessiblethroughRESTAPIsandleveragedin

service provider chargeback applications

Policy Management

•Full-featuredmanagementthroughvShieldManager;many

features also accessible through vCenter Server interface

•CustomizableinterfaceformanagementusingRESTAPIs

•SupportforintegrationwithenterpriseITsecurity

management tools

Logging and Auditing

•Basedonindustrystandardsyslogformat

•AccessiblethroughRESTAPIsandvShieldManagerUI

•Administrator-denedloggingon/oforkeyedgesecurity

events (errors, warnings, etc.):

– Firewall: at rule level

– NAT: at rule level

– VPN: site-to-site connection name

– Web load balancer: At pool level, speciﬁc Web requests

including URL/folder

– DHCP: At service level, bindings (release/renewals)

Find Out More

ForinformationortopurchaseVMwareproducts,

call877-4-VMWARE(outsideofNorthAmericadial

650-427-5000), visit www.vmware.com/products,

orsearchonlineforanauthorizedreseller.Fordetailed

product speciﬁcations and systems requirements, refer

to the VMware vShield Edge Administration Guide

•Rapidly and securely provision virtual datacenter perimeters –

vShieldEdgeallowsorganizationstoeasilycreatesecure,

logical, hardware-independent perimeters (“edges”) around

virtual datacenter environments, making it easier to leverage

shared network resources in multi-tenant IT infrastructures.

•Protect data conﬁdentiality over shared networks – vShield

Edge provides site-to-site VPN with 256-bit encryption to

protect the conﬁdentiality of all data transmitted across

virtual datacenter perimeters.

•Ensure performance and availability of Web services –

vShieldEdgeecientlymanagesinboundWebtracacross

virtual machine clusters and includes Web load balancing

capabilities that customers can deploy in conjunction with

port group isolation and edge security, or on its own.

•Facilitate compliance management – vShield Edge provides

the necessary controls such as detailed event logging and ﬂow

statistics that enterprises need to demonstrate compliance with

corporate policies, along with industry and government regulations.

Key Features

Stateful Inspection Firewall

Inbound and outbound connection control with rules based on

the following parameters:

•IP address – source/destination IP address

•Ports – source/destination port

•Protocol – type (TCP or UDP)

Network Address Translation

•IPaddresstranslationto/fromthevirtualizedenvironment

•MasqueradingofvirtualdatacenterIPaddressesto

untrusted locations

Dynamic Host Conﬁguration Protocol

•AutomaticIPaddressprovisioningtovirtualmachinesin

vSphere environments

•Administrator-denedparameters(e.g.,addresspools,

lease times, dedicated IP addresses, etc.)

Site-to-Site VPN

•Securecommunicationbetweenvirtualdatacenters

(or edge security virtual machines)

•IPsecVPN,basedontheInternetKeyExchange(IKE)protocol

Andere VMware Software Handbücher

VMware

VMware VCLOUD SDK 1.0 - FOR NET DEVELOPERS GUIDE Bedienungsanleitung

VMware

VMware ACE Gebrauchs- und Pflegehandbuch

VMware

VMware ESX 4.0 - GETTING STARTED UPDATE 1 Allgemeine Anweisungen

VMware

VMware VCENTER APPLICATION DISCOVERY MANAGER 6.0 Bedienungsanleitung

VMware

VMware VCLOUD REQUEST MANAGER 1.0.0 Bedienungsanleitung

VMware

VMware THINAPP 4.6 - MIGRATING APPLICATIONS TECHNICAL... Bedienungsanleitung

VMware

VMware THINAPP 4.6 - MIGRATING APPLICATIONS TECHNICAL... Benutzerhandbuch

VMware

VMware ESX 4.0 - GETTING STARTED UPDATE 1 Bedienungsanleitung

VMware

VMware VC-SRM4-A - vCenter Site Recovery Manager Bedienungsanleitung

VMware

VMware 454885-B21 - Lab Manager Standard Foundation... Bedienungsanleitung

VMware

VMware VIEW 4.5 Installations- und Betriebshandbuch

VMware

VMware VCM 5.3 Bedienungsanleitung

VMware

VMware VCM 5.3 - RECOVERY GUIDE Bedienungsanleitung

VMware

VMware VIEW MANAGER 4.X - EXTENDING VIRTUAL MACHINE DELECTION WITH... Bedienungsanleitung

VMware

VMware PACKAGE MANAGER 1.1 Bedienungsanleitung

VMware

VMware vSphere 4 Installations- und Betriebshandbuch

VMware

VMware VCENTER CONVERTER EN-000158-02 Bedienungsanleitung

VMware

VMware VC-VLM4-C - vCenter Lab Manager Bedienungsanleitung

VMware

VMware SUSE LINUX ENTERPRISE SERVER Bedienungsanleitung

VMware

VMware VSHIELD APP 1.0.0 UPDATE 1 - API Handbuch

VMware

VMware VSHIELD Bedienungsanleitung

VMware

VMware 4817V62 - vSphere - PC Bedienungsanleitung

VMware

VMware vSphere 4 Bedienungsanleitung

VMware

VMware VCENTER APPLICATION DISCOVERY MANAGER 6.1.1 -... Bedienungsanleitung

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Adobe

Adobe 65007312 - Photoshop Lightroom Handbuch

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

HP ProLiant BL420c Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Novell

Novell GROUPWISE 8 - INTERNET AGENT Bedienungsanleitung

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung