VMware’s philosophy and entire approach is to make cybersecurity intrinsic across the network, on anywhere, on any cloud and on any device. In April we announced that we were taking internal security to the next level following the introductions of our service-defined firewall and NSX Intelligence with the general availability of Intrusion Detection and Prevention capabilities for the service-defined Firewall.
NSX Distributed IDS/IPS signatures are application specific and only applied to the appropriate servers, resulting in fewer false positives and significantly higher throughput. These capabilities enable efficiency and flexibility that cannot be matched by legacy and proprietary hardware-defined systems.
We also announced our full stack networking and security for modern applications. NSX-T treats containers and VMs as first-class citizens, having supported Kubernetes platforms for more than two years.
Security has become increasingly complex, with organisations often using complex blend if public, private and mixed cloud combined with on-premise infrastructure and software. Moreover, with thousands of products available, from end-point security, to device security, application security and network security, there is a lot of security to consider. The prevailing reactive approaches to cybersecurity are insufficient amid this complexity.
The main stress point for CISOs is complexity. Traditional approaches to security were essentially designed for a different world, and when applied to the far worse threat landscape we see today, they result in an unmanageable level of complexity by relying on too many point products. Today’s typical solutions focus on blocking threats at the network perimeter; they tend to be reactive and they rely on being able to recognise malware. However, this can be viewed as a futile task with over three hundred thousand new zero-day threats appearing every day.
By making security intrinsic across all parts of the network, we can reduce the risk to critical applications, sensitive data, and users by shrinking the attack surface across clouds, data centres, end users, and the enterprise edge. VMware is shifting the balance of power from attackers to defenders by removing the complexity inherent with cybersecurity. We are delivering intrinsic security through a comprehensive portfolio spanning the critical control points of security: network, endpoint, workload, identity, cloud, and analytics. Because we’re built-in, we’re everywhere apps, devices, and users reside, and this gives us a unique vantage point to be informed about what’s happening in a customer’s environment. With this knowledge, we can be proactive in hardening customers’ environments to better prevent threats.
By Ihab Farhoud, Director, Systems Engineering, METNA, VMware Middle East, Turkey and North Africa.