Broadcom Simplifies and Accelerates Private Cloud Lateral Security with VMware vDefend Innovations : @VMblog

Article

Search:

Follow VMblog.com:

Improve end user experience in VDI, DaaS and physical endpoint environments

Broadcom Simplifies and Accelerates Private Cloud Lateral Security with VMware vDefend Innovations

Broadcom Inc. introduced new updates to VMware vDefend that enable organizations to up-level security planning and assessment, simplify lifecycle management and operations, and seamlessly scale security across application environments. As organizations develop security plans for VMware Cloud Foundation (VCF), these new technologies and guidance tools enable improved time-to-implementation and help efficiently maintain security operations for all critical and non-critical applications.

"Organizations often navigate thousands of applications to power their business. This complexity makes it difficult to maintain visibility and lateral security across all applications," said Umesh Mahajan, vice president and general manager, Application Networking and Security Division, Broadcom. "VMware vDefend simplifies how organizations achieve zero trust and private cloud security goals by cutting through complexity and providing a comprehensive lateral security implementation. The latest vDefend innovations further this efficiency by offering real-time security assessments, a next-generation security services platform to simplify operations, and micro-segmentation as code to further improve security operations."

VMware vDefend is available as an Advanced Service for VMware Cloud Foundation.

Robust Private Cloud Security Planning and Assessment with Security Intelligence
It is essential for security teams to quickly detect and investigate potential breaches in their environment. This requires a proactive approach to security planning and rapid time-to-implementation across all application workloads. To support this, VMware vDefend introduces a Security Segmentation Assessment and Report in its Security Intelligence tool for lateral security visibility and threat analytics. It provides a real-time assessment of an organization's security segmentation posture for implementing a zero trust private cloud initiative. The assessment analyzes application traffic to deliver timely, data-driven insights related to application interactions, pinpointing potential security gaps due to insecure network protocols and inappropriate application communication, measuring progress with a security segmentation score, and offering actionable and easy-to-implement policy recommendations. This assessment, along with rule recommendations, help organizations rapidly roll out lateral security protection on VMware vDefend Distributed Firewall across all their applications and stay ahead of potential breaches. The Security Segmentation Assessment Report is available today.

Simplified Security Operations
To establish a sophisticated security plan, organizations need a consistent, reliable platform and an optimized approach to micro-segmentation that allows customers to apply security as part of the application deployment process. vDefend addresses these needs by introducing new updates, including:

Updates to Security Services Platform (SSP): SSP is a self-contained and scale-out platform that simplifies deployment of Security Intelligence as well as advanced threat prevention tools such as Network Detection and Response and Malware Prevention. The new SSP architecture greatly streamlines the user experience with a simplified network design, streamlined life cycle management, tailored user profile for security administrators, and easier workflows for configuration and deployment. The enhanced scale-out capability ensures that visibility and threat prevention automatically extend to large-scale VCF deployments.
Micro-segmentation as Code: vDefend Distributed Firewall offers an optimized and streamlined approach to micro-segmentation. It is built into the hypervisor and applies security to every workload with an API-driven model that plugs into automation frameworks. This allows customers to apply lateral security as part of the application deployment process and seamlessly scale micro-segmentation across application environments. It features a declarative context-based model to deploy the full intent of customers' vDefend security policy in a single, simplified manner and includes built-in automation that eliminates the need for external scripting. This rich policy model applies to both virtual machines and container workloads to ensure consistent lateral security protection.
Network Detection and Response Enhancement for Air-Gapped Environments: The Network Detection and Response (NDR) capability of VMware vDefend now supports mechanisms for organizations to securely update threat intelligence in on-premises operations without external network access. This ensures that all detection, correlation, and response activities are executed with higher fidelity within the closed network leveraging both internally and externally sourced threat intelligence. NDR provides an additional layer of protection against targeted attack campaigns in sensitive, high-security or classified environments and supports industries with strict regulatory compliance.
VMware Validated Solutions design for secure VCF: This best practice design guide with prescriptive use case guidance enables security teams to rapidly roll-out zero trust lateral security for VCF's management components and application workloads.

These capabilities are available today.

Third-Party Validation
Third-party research reports outline the impact and value of vDefend. vDefend recently received an AAA rating for Advanced Threat Prevention in the SE Labs Advanced Security Test Report. The SE Labs methodology tests full chains of attack, including complex, multi-staged ransomware threats, and uses a variety of tools and techniques commonly employed by threat actors to analyze the performance of vDefend Advanced Threat Prevention. An AAA rating is the highest rating vendors can receive and indicates the use of best-of-breed threat detection algorithms.

Additionally, a recently commissioned Total Economic Impact (TEI) study conducted by Forrester Consulting on behalf of Broadcom, revealed that a composite organization representative of interviewed customers with experience using VMware vDefend: