DC13

Unifying the internal cloud while maintaining network trust separation for security and privacy with VMware vShield Zones

Today's organizations in the Internet era are increasingly inter-connected for efficiency and productivity, while needing to maintain varying levels of separation and trust that reflect the complexity of their users, data, applications, and regulations. As virtualization permeates growing portions of the datacenter, network security devices require physical chokepoints that fragment shared resource pools and disrupt the vision of a seamless internal cloud. This session will discuss current and emerging options for partitioning a VMware deployment into logical organization or trusted network zones for security, privacy, and compliance. An overview of the new VMware vShield Zones will be presented, and several use cases will be given to collapse an Internet-facing virtualized DMZ (de-militarized zone), meet Payment Card Industry (PCI) firewall standards for cardholder privacy, or to isolate multiple tenants in the cloud. We will also look forward at how emerging innovations such as VMsafe and OVF can deliver "better-than-physical" network security in future VMware and third-party solutions to fulfill the vision of a self-configuring, self-securing virtual datacenter.

Virtual Datacenter Operating System

Technical Session

internal cloud, network trust separation, VMware vShield Zones, DMZ (de-militarized zone), Payment Card Industry (PCI), VMsafe and OVF

1 Hour

Allwyn Sequeira, Sr. Director of Engineering
VMware