VMware IT implemented micro-segmentation using the NSX distributed firewall to secure production applications and deployed it in a large-scale private cloud environment. The session covers design considerations, use cases, and lessons learned from VMware's deployment, which hosts over 20,000 VMs. Attendees will gain insights on planning, implementing NSX environments, and multi-tenant security models.

1.
Session
Title
-­‐
VMWare
on
VMWare
-­‐
How
VMware
IT
Implemented
Micro-­‐Segmentation
and
Deployed
Large
Scale
Private
Cloud
Using
NSX
Session
Abstract
VMware
IT
implemented
micro-­‐segmentation
using
NSX
Distributed
Firewall
to
secure
production
applications
and
deployed
NSX
in
a
large-­‐scale
internal
private
cloud
environment.
We
will
review
use
cases
for
micro-­‐segmentation
such
as
SAP
and
discuss
design
considerations.
We
will
outline
our
approach
for
finalizing
the
firewall
policy
model
using
Log
Insight
for
firewall
traffic
monitoring
and
analytics
and
discuss
roles
and
responsibilities
and
lessons
learned.
Please
join
us
to
learn
how
VMware
secured
its
business
services
by
leveraging
NSX
and
scaled
its
internal
private
cloud
deployment
using
NSX
features.
We
will
discuss
the
design,
technical
and
organizational
considerations
of
one
of
the
world’s
largest
deployments
of
NSX
for
vSphere
(hosting
over
20,000
VMs).
We
will
review
the
decisions
involved
in
deploying
new
NSX
environments
and
how
VMware’s
internal
private
cloud
leverages
NSX
edge
firewalling
to
achieve
a
scalable,
multi-­‐tenant
security
model.
Session
Outline
• Design
considerations
for
implementing
micro
segmentation
• NSX
Distributed
Firewall
traffic
monitoring
and
analytics
using
Log
Insight
• Review
micro-­‐segmentation
use
cases
such
as
the
SAP
Enterprise
Resource
Planning
(ERP)
Solution
and
Virtual
Desktop
Infrastructure
(VDI)
• Overview
of
VMware’s
Private
Cloud
infrastructure
• Multi-­‐tenant
considerations
in
VMware’s
Private
Cloud
• NSX
features
deployed
in
VMware’s
Private
Cloud
• Recommendations
for
implementing
NSX
in
brownfield
and
greenfield
environments
Key
Takeaway
1:
How
to
plan
and
implement
an
NSX
Distributed
Firewall
deployment
Key
Takeaway
2:
Design
considerations
for
large-­‐scale,
multi-­‐tenant
NSX
environments
Key
Takeaway
3:
Recommendations
for
greenfield
and
brownfield
NSX
implementation
Technical
Level:
Technical
Track:
Software
Defined
Data
Center
Sub-­‐track:
Networking
and
Security
Product
and
Topic:
NSX
Audience:
IT-­‐Network,
IT
–
Risk/Compliance/Security

2. Link
to
the
recorded
session
-­‐
http://vmware.mediasite.com/mediasite/Showcase/default/VideoSearch#VideoSearch/0/swapnil/2/nul
l/null/0
To
schedule
a
discussion
with
an
SME
on
this
topic
contact:
vmwonvmw@vmware.com