vCloud Air

vCloud Air Protection

vCloud Air Protection Solutions

VMware state that the 'customer' is responsible for a number of protection / security management concerns, namely 'information, network and security monitoring'.



The image “Responsibility Stack”, illustrates the limits of control and areas of individual responsibility for VMware and tenants of its vCloud Air. The blue areas are the responsibilities of VMware while the grey areas are the responsibility of the consumer.





 
Application Load Balancing

Application Availability & Performance


Simplify disaster recovery, traffic distribution and delivery of hybrid cloud application services



  • Load Balancers deployed in private cloud and vCloud Air.
  • Easily scale applications deployed in vCloud Air and enhance performance.
  • Comprehensive application delivery and global traffic distribution.
  • Simplify failover between public, private and hybrid cloud in the event of server failure at any location
  • Ensure reliable and secure connectivity between users and cloud based application servers.
  • Global traffic distribution
  • Deliver Layer 7 application services including pre-authentication, SNI, SSL offload (decryption and encryption), IPS, content switching, session persistence… 
  •  Enable the delivery of multi-tenant application
    • intelligent content switching and edge security enable customers to securely and reliably deliver multi-tenant apps to their clients on a single set of hosted resource
  •  Accelerate development / test, packaged application deployment.





Deployment Options
> Software or as a service

> On-premise or private cloud


Possible to extend your existing on-premise or private cloud security platforms out to systems on vCloud Air.





Security for vCloud Air  

Protection from cyber threats and attacks



  • Anti-malware
  • Web application security
  • Application vulnerability scanning (detect vulnerabilities in web applications)


  • Host-based firewall
  • Integrity monitoring, log inspection and event monitoring
  • Encryption
  • Patching to protect applications and servers


Firewall
Next-generation firewall capabilities for apps born in the cloud, as well as high-speed (>1Gbps) site-to-site remote access. Ideal for hybrid environments to optimise and secure traffic between on-premises and vCloud Air environments. 


Web Application Firewall  
Secure web applications and prevent attacks on critical websites wherever they run.


Email Content Security
  • Protect against email-borne threats and Anti-Spam
  • Prevent data leaks.
  • Encrypt messages
  • Email Continuity - if your primary mail servers become unavailable.




Data Archiving 
  • eMail archiving
  • eDiscovery in hybrid cloud environments




High Performance vCloud Air Connectivity

Cloud, SaaS and Private WAN Connectivity

> Multi-site, end-user access to VMware vCloud

As customers begin to run critical applications like email, file, and web apps in vCloud, geographically distributed locations will require centralised access. For these locations, WAN latency can have a negative impact on application performance.

Remove bottlenecks and make cloud-hosted applications perform as if they were on your local network.



> Unify the enterprise WAN with the Internet and public cloud.

> Optimise and reduce traffic between your data centers and vCloud

> Built in IPSec VPN





Backup & Restore for VMware vCloud Air

> vCD integration for data backup

> Auto-Discovery of VDCs, vApps and resource pools


> Perform agent-less image-based backup and recovery of virtual machine disks - Automates the protection, failover and failback of applications to and from vCD.

> End-user tenants can self-deploy and perform backup, disaster recovery and migration services through an easy to use web-based interface.

> Enables the tenants to perform backup, disaster recovery and migration through a simple and intuitive web-based interface.

> Designed for public, private, and hybrid clouds built on VMware vCloud Director

> Web interface requiring no client side deployment.

> Military-grade encryption for backups and transport.

> Backup 
Allow tenants to back up and recover their virtual machines by themselves though a simple web-based user interface. 

> DR to Cloud 
Provide tenants with a cloud disaster recovery site where they can run copies of their on-premise machines, physical or virtual, in a case of disaster. 

> Migration 
Help tenants migrate their existing physical or virtual machines to the cloud, between clouds, and back to the original location to help address lock-in concerns.



Compliance

Solutions address major regulatory requirements for PCI DSS 3.0, HIPAA, NIST, SAS 70, and many others.





Managed vCloud Air / VMware Security Services

The components that make up the vCloud Suite are:

  • VMware vSphere: One of the world’s leading server virtualisation platforms
  • vCenter Site Recovery Manager: Policy-based disaster recovery and testing for all virtualised applications
  • vCloud Networking and Security: Networking and security for a virtualised compute environment
  • vCenter Operations Management Suite: Intelligent performance, capacity, and configuration management for vSphere environments
  • vCloud Automation Center: Self-service and policy-based infrastructure and application provisioning for vSphere environments
  • vCloud Director: Secure provisioning of virtual data centres that provide virtualised compute, storage, networking and security
  • vRealise (formerly) IT Business Management Suite: Financial management with transparency into cost and quality of IT services, industry benchmarking, and budget analysis.












Also See

> VMware / vSphere Managed Security Services





If you want to implement one or more of the solution features presented above, contact us today to book a meeting



P: +44(0)7714 209927

S: +44(0)1273 329753

info@securenetconsulting.co.uk