Prezentace ze semináře Jak dále rozvíjet VMware ve vašem IT prostředí Praha, 15.6.2017

1. NSX řešení pro bezpečnost
a virtualizaci vašich sítí
J i ř í V i k t o r i n , S E V i r t u a l I n f r a s t r u c t u r e
1 5 . 6 . 2 0 1 7

2. 2
Software Defined Network

3. 3
Customer Business Value
More secure and 1/3 the cost
of less secure infrastructure
Policy “shrink-wrapped”
around the VM
Logical groups
Threats contained
Internet
Data Center
Perimeter
Performance
Service insertion
No change to existing
infrastructure
Micro-segmentation with NSX
• Delivering inherently secure infrastructure

6. WEB
APP
DB

7. WEB
APP
DB
NORTH/SOUTH
TRAFFIC

8. WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC

9. WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC

10. 70% +
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
WEB
APP
DB

11. 70% +
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
WEB
APP
DB
“TRUST EVERYONE”

12. WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
“TRUST EVERYONE”

13. “TRUST EVERYONE”
WEB
APP
DB
OPERATIONALLY
INFEASIBLE
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS

14. “TRUST EVERYONE”
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE

15. “TRUST EVERYONE”
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N

16. “TRUST EVERYONE”
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N
N = 1,000 VMs

17. “TRUST EVERYONE”
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N
N = 1,000 VMs

18. “TRUST EVERYONE”
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N
N = 1,000 VMs
FINANC
E
100
H.R.
50

19. “TRUST EVERYONE”
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N
N = 1,000 VMs
950
900
FINANC
E
100
H.R.
50

20. “TRUST EVERYONE”
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N
N = 1,000 VMs
FINANC
E
100
H.R.
50 950
900

21. “TRUST EVERYONE”
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N
N = 1,000 VMs
FINANC
E
100
H.R.
50
DISTRIBUTED FIREWALL
950
900

22. VDI
VIO
vCA
“TRUST EVERYONE”
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N
N = 1,000 VMs
FINANC
E
100
H.R.
50
DISTRIBUTED FIREWALL
950
900

23. DB
“TRUST EVERYONE”
vCA
VDI
VIO
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N
N = 1,000 VMs
FINANC
E
100
H.R.
50
DISTRIBUTED FIREWALL
950
900

24. “TRUST EVERYONE” “ZERO TRUST”
vCA
VDI
VIO
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N
N = 1,000 VMs
FINANC
E
100
H.R.
50
DISTRIBUTED FIREWALL
950
900

25. “TRUST EVERYONE” “ZERO TRUST”
vCA
VDI
VIO
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE NO. OF VMs = N
N = 1,000 VMs
FINANC
E
100
H.R.
50
DISTRIBUTED FIREWALL
AUTOMATE
OPERATE
BUSINESS
950
900

26. “TRUST EVERYONE”
“CASTLE” “HOTEL”
vCA
VDI
VIO
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE
“ZERO TRUST”
NO. OF VMs = N
N = 1,000 VMs
FINANC
E
100
H.R.
50
DISTRIBUTED FIREWALL
AUTOMATE
OPERATE
BUSINESS
950
900

27. “TRUST EVERYONE”
USE CASE SUMMARY
• MICRO-SEGMENTATION
• CONSOLIDATION/MIGRATION
• REFRESH
• MOBILITY
• AUTOMATION
vCA
VDI
VIO
WEB
APP
DB
70% +
NORTH/SOUTH
TRAFFIC
EAST/WEST
TRAFFIC
ACCESSEES
- FTEs
- CONTRACTORS
- 3RD PARTIES
- STUDENTS
- CUSTOMERS
OPERATIONALLY
INFEASIBLE
“ZERO TRUST”
NO. OF VMs = N
N = 1,000 VMs
FINANC
E
100
H.R.
50
“CASTLE” “HOTEL”
DISTRIBUTED FIREWALL
AUTOMATE
OPERATE
BUSINESS
950
900

28. 28
Automating IT Processes
˃ Delivering IT at the speed of business Business Value
Reduce infrastructure
provisioning time from
weeks to minutes
Management
APIs, UI
Policies,
Groups, Tags
Switching
Routing
Load
Balancing
Connectivity to
Physical Networks
Firewalling
VPN
Data Security
Activity
Monitoring

29. 29
Data Center Anywhere
˃ How we help you create data center anywhere.
Data center #1
Business Value:
Reduce RTO by 80%
Data center #2
Cloud

30. 30
Edice
˃ Standard
˃ Distribuovaný switching, routing, Edge Firewall, NAT
˃ Advanced
˃ Distribuovaný firewall, Load balancing, integrace s produkty 3rd
party (Checkpoint, F5, McAfee …)
˃ Enterprise
˃ Cross vCenter, VPN, Remote Gateway

31. 31
Licencování
˃ Servery – per CPU
˃ Desktopy – na uživatele (licence po 10-ti a 100 CCU
uživatelích)
˃ Remote Office/Branch Office – per VM (licence po 25 VM)

32. 32
Thank You