Virtualization Forum 2016 Praha, 11.10.2016 sál A

3. Paula
NEW APP
DEPLOYMENT
APP CLONING
APP SERVER
OPERATIONS
REPORTING/P
LANNING
Marco
N/W INFRA
MGMT
L4-L7 N/W
SVC MGMT
ACCESS
CONTROL
CONFIG &
CHANGE
MGMT
IS MY APP HEALTHY?
N/W SERVICES
HEALTHY?
COLLABORATION
TRADITIONAL
DC PUBLIC CLOUD HYBRID DC, SDDC
Data Center(s)
Load Balancing
DDoS Protection
Firewall
RBAC
ITSM

4. Public Cloud - Shared Responsibility Security Model
CP Global
Infrastructure
Data Centers
Zones
Regions
Edge
Locations
Networking Services
Compute Database Storage
Deployment & Management
Client-Side Data
Encryption & Data
Integrity Authentication
Server-Side Encryption
(File System and/or
Data)
Network Traffic
Protection (Encryption,
Integrity, Identity)
Operating System, Network and Firewall
Configuration
Platform, Applications, Identity & Access
Management
Customer Data Customer’s responsibility
• Protecting the
confidentiality, integrity,
and availability of their
data in the cloud
• OS and
application-level security
Cloud Provider responsibility
• Providing a global secure
infrastructure and services
PhysicaltoHypervisorOSandApplication
CloudProviderCustomer

11. Device
Package
Device
Package
'
'
'
'

13. Deployment and Scalability (Heat)
Metering (Ceilometer)
Compute (Nova)
Identity (Keystone)
Images (Glance) Object Store (Swift)
Storage (Cinder)
LBaaS VPNaaS FWaaS
DNSDHCPL2/L3
ManagementConsole(Horizon)
Network (Neutron)

14. Features
Key Features
• All BIG-IP Modules available
• Bring you own licenses (BYOL) initially
• Single NIC support
• Dynamic Routing
• Max throughput: 1Gbps
• 30 day free trial via Eval License (BYOL)
25M
200M
1Gbps

16. Public Cloud - Shared Responsibility Security Model
CP Global
Infrastructure
Data Centers
Zones
Regions
Edge
Locations
Networking Services
Compute Database Storage
Deployment & Management
Client-Side Data
Encryption & Data
Integrity Authentication
Server-Side Encryption
(File System and/or
Data)
Network Traffic
Protection (Encryption,
Integrity, Identity)
Operating System, Network and Firewall
Configuration
Platform, Applications, Identity & Access
Management
Customer Data Customer’s responsibility
• Protecting the
confidentiality, integrity,
and availability of their
data in the cloud
• OS and
application-level security
Cloud Provider responsibility
• Providing a global secure
infrastructure and services
PhysicaltoHypervisorOSandApplication
CloudProviderCustomer

17. IDENTITY AND ACCESS MANAGEMENT (IAM) APPLICATION PROTECTION
Protecting your Applications and Information – Wherever they reside

18. …integrates with existing to enhance security
NGFW
Vulnerability Scanning
IDS
Packet / Forensics
Data Loss Prevention
HSM
APT Scanning
IPS
P A R T N E R E C O S Y S T E M
F5 APPLICATION PROTECTIONF5 IDENTITY & ACCESS MANAGEMENT
SSL Inspection & Interception
WAF DDoS Protection
DNS Security
Web Fraud Protection
IP IntelligenceCarrier Class Firewall
Identity Federation
App Access Mgmt
Enterprise Mobility Gateway
Secure Web Gateway
Remote Access

22. https://DevCentral.f5.com/iWorkflow