User manual VMWARE VSHIELD APP DATASHEET

[. . . ] DATA S H E E T VMware vShield App Protect Applications from Network-based Attacks AT A G L A N C E VMware vShield App, part of the VMware vShield family of virtualization security products, protects applications in the virtual datacenter from networkbased threats. [. . . ] ·Eliminatetheneedfordedicatedhardware and VLANs to separate security groups from one another. ·Optimizehardwareresourceutilizationwhile maintaining strong security. ·Simplifycompliancewithcomprehensivelogging of all virtual machine network activity. How Does VMware vShield App Work? vShield App installs on each vSphere host, controlling and monitoring all network traffic on the host, even for packets that never cross a physical network interface card (NIC). vShield App can create and enforce policies based on administrator-defined, business-relevant security groups instead of physical boundaries or static assumptions about application deployments. vShield App provides a centralized interface that leverages vCenter Server to consistently apply these policies across multiple vSphere hosts in the virtual datacenter. How Is VMware vShield App Used? VMware vShield App enables granular policy enforcement using security groups. ·Eliminate blind spots ­ vShield App helps administrators define and enforce granular policies for all traffic that crosses a virtual NIC, increasing visibility over internal virtual datacenter traffic while helping to eliminate detours to physical firewalls. ·Maintain change-aware protection ­ vShield App helps to ensure that network topology changes do not impact application security with continuous firewall protection for virtual machines as they migrate from host to host. P R O D U C T DATA S H E E T / 1 VMware vShield App ·Efficiently manage dynamic policies ­ vShield App helps to simplify policy definition and provides administrators a rich context for defining and refining internal firewall policies as business needs evolve over time. ·Reduce botnet risks ­ vShield App helps security administrators protect against botnets and other attacks by dynamically allocating ports to trusted applications. ·Control access to shared resources ­ vShield App allows security administrators to restrict access to shared services such as storage and backup on vSphere hosts based on IP address. [. . . ] All other marks and names mentioned herein may be trademarks of their respective companies. [. . . ]