Security and Billing for Azure Pack. Presented by 5nine Software and Cloud Cruiser

Transcription

1 Security and Billing for Azure Pack Presented by 5nine Software and Cloud Cruiser

2 Meet our Speakers Symon Perriman VP of Business Development 5nine Paul Zinn Senior Product Manager Cloud 2

3 Key Topics for Today Understanding Windows Azure Pack Security & Protection for Windows Azure Pack Chargeback & Billing for Windows Azure Pack Integrating Solutions for Windows Azure Pack Discussion 3

4 Understanding Windows Azure Pack poll #1

5 Development Management Identity Data Virtualization

6 Microsoft Azure Customers IT Admin Microsoft 6 Azure

7 Windows Azure Pack - Tenant Customers IT Admin 7

8 Windows Azure Pack - Admin Customers IT Admin 8

9 Windows Azure Pack Customers IT Admin Windows Azure Pack 9

10 Azure Pack Services Service Management REST API Web Platform application Services (PaaS) Infrastructure Services (IaaS) Reliable Messaging Virtual Networking SQL Server & MySQL Database (DBaaS) 5nine Cloud Security (SECaaS) Cloud Cruiser 10

11 Security & Protection for Windows Azure Pack poll #2

12 Meet 5nine Software Founded in 2009 Headquartered in Chicago, with staff in an additional 14 regions worldwide, including 9 MVPs More than 68,000 Hyper-V users globally, representing companies and datacenters of all sizes The #1 leading solutions provider of security & management applications for Hyper-V 5nine Cloud Security Agentless firewall, antivirus, and intrusion detection security for Hyper-V, System Center and Azure Pack 5nine Manager - Integrated Hyper-V and Cluster Management for SMBs 5nine V2V Easy Converter - Free VMware to Hyper-V virtual machine migration tool Visit for more info 9x Cloud 5nine Cruiser Software Inc.

13 A Suite of Virtualized Security Tools for Hyper-V Security designed specifically for Hyper-V virtual machines, disks, networks and hosts Regulation now have requirements for virtualization Hackers now know how to exploit virtualization Firewall Antivirus / Antimalware Active Network Detection Intrusion Detection Standard datacenter security practices are still needed Physical security, BitLocker, VPN, Active Directory, etc Cloud 5nine Cruiser Software Inc.

14 Automatically & Immediately Protect Everything Hosted environments are never secure A single security breach can ruin your reputation and business Security for virtualized environments is different It is impossible to guarantee security using traditional endpoint protection Requires installation Slows deployment Complicates management Virtualized environments are dynamic Virtual machines Virtual disks Virtual networks Cloud 5nine Cruiser Software Inc.

15 How 5nine Cloud Security Works Cloud 5nine Cruiser Software Inc.

16 Host-Based Protection for Firewall, AV/AM & IDS Cloud 5nine Cruiser Software Inc.

17 Host-Based Protection for Firewall, AV/AM & IDS Cloud 5nine Cruiser Software Inc.

18 Abstract & Hide Security from Users The public is renting your hardware Remove the burden of security from the tenants Manage security for the tenants Update signatures for the tenants Ensure the tenants cannot disable security Accidently Purposely with bad intentions Centrally manage security Cisco Snort 18

19 Guarantee Isolation & Resource Access Isolation and privacy is critical in a cloud An admin should not access a tenant s VM A VM cannot affect the host A VM cannot affect another VM Use Quality of Service (QoS) or throttling for memory, CPU, network & storage bandwidth Avoid Denial of <Resource> attacks Cloud 5nine Cruiser Software Inc.

20 Protect All Virtual Networks Traditional security protect traffic between hosts Does not protect traffic between VMs on the same host Threats can spread if one tenant becomes infected Virtual Network Types External Internal Private Network Security Appliance Cloud 5nine Cruiser Software Inc.

21 Use a Single Solution for all VMs Intercept traffic before it gets to the VM Manage traffic at the network protocol level TCP, UDP, GRE, ICMP, IGMP, etc. 21 Hyper-V Guest OS List: aka.ms/hypervguestos 2015 Cloud 5nine Cruiser Software Inc.

22 Use a Single Solution for all VMs Intercept traffic before it gets to the VM Manage traffic at the network protocol level TCP, UDP, GRE, ICMP, IGMP, etc. Server Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2008 R2 Home Server 2011 Small Business Server 2011 Windows Server 2003 tenant Windows 10 Windows 8.1 Windows 8 Windows 7 Windows Vista Windows XP Linux & UNIX CentOS Debian FreeBSD Oracle Linux Red Hat RHEL SUSE Ubuntu 22 Hyper-V Guest OS List: aka.ms/hypervguestos 2015 Cloud 5nine Cruiser Software Inc.

23 Active Detection of Incoming Threats Immediately identify incoming threats Unencrypted traffic HTTP (more coming soon) Automatically alert admins PowerShell Event Logs Cloud 5nine Cruiser Software Inc.

24 Fast AV Scanning with No Performance Impact Agent-based scanning causes scanning storms Decreases VM performance for all tenants Reduces VM density on the hosts 5nine uses its proprietary Change Block Tracking (CBT) driver Scan only changed blocks on the disk Scan up to 70x faster Cloud 5nine Cruiser Software Inc.

25 Automate Security Task Management PowerShell support Task scheduling Enables scalability Ensures consistent SLAs Eliminates human error For tasks with high resource utilization, stagger the action to avoid performance impact Cloud 5nine Cruiser Software Inc.

26 Enterprise High-Availability for Security 5nine Cloud Security Management 5nine Console 5nine PowerShell Azure Pack Extension SCVMM 5nine Cloud Security Management Server / VM Redundant Management Group Branch Office 5nine Sync Hyper-V Hosts & Clusters SQL Server SQL Server SQL Server 26 SQL Cluster 2015 Cloud 5nine Cruiser Software Inc.

27 Protection from Inbound, Outbound & Internal Threats 5nine Cloud Security Management Server / VM Public Internet Unusual Normal Traffic Hyper-V Hosts SQL Server Cloud 5nine Cruiser Software Inc.

28 System Center Virtual Machine Manager Plugin Centralized virtualization security management through SCVMM Full 5nine Cloud Security integration Integration with the SCVMM Console, Network Services & Logical Switch Free add-on for 5nine Cloud Security Cloud 5nine Cruiser Software Inc.

29 Azure Pack Security as a Service (SECaaS) Azure Pack allows you to run Azure IaaS services in your datacenter Improved security for your infrastructure and your tenants Differentiate & monetize your services by offering secure VMs Simplify security management for tenants through on/off buttons Firewall, Active Network Detection & Intrusion Detection Preconfigure firewall templates for different VM roles Free add-on for 5nine Cloud Security Cloud 5nine Cruiser Software Inc.

30 Demo: 5nine Cloud Security

31 How to Acquire 5nine Cloud Security or Cloud Security: Licensing options Licensed per 2 CPUs Flexible pricing based on VM density Service provider licenses (per VM / month or per VM / year) Includes the Kaspersky Lab or ThreatTrack plus Cisco Snort license Sales direct or through resellers, distributors, partners & solution integrators 31

32 Chargeback & Billing for Windows Azure Pack

33 Meet Cloud Cruiser Founded in 2009 Headquartered in Silicon Valley Industry-leading financial management solution for hybrid cloud Customers include the largest enterprises and service providers in the world 33

34 Cloud Cruiser Overview Cost analytics for the hybrid cloud Single solution to price, bill for cloud usage, and optimize spend Broadest scope of collectors Most sophisticated cloud analytics 34

35 Cloud Cruiser Overview Cost analytics for the hybrid cloud Deep partnership with Microsoft First embedded partner solution for Windows Azure Pack Plus integrations to Azure public cloud, System Center, Hyper-V 35

36 Cloud Cruiser Overview Cost analytics for the hybrid cloud Deep partnership with Microsoft Integrations to industry-leading public/private clouds, apps, databases, and more 36

37 Financial Management for Microsoft Hybrid Cloud Windows Azure Pack (WAP) Azure Azure Public Azure Manage usage and costs of WAP resources, such as VMs, website and database instances WAP $ $ Manage IT spend across your public cloud assets like compute, storage, data, networking, & apps HYBRID CLOUD poll #3 SINGLE TENANT 37 MULTI TENANT

38 Microsoft customer needs 57% 59% 47% 44% of total surveyed of public cloud users of cloud adopters of cloud adopters Improve forecasting Compare costs across clouds Implement chargeback/billing Match supply and demand 38 Microsoft Ignite May 2015 Survey Results

39 Why is this so hard? service providers Diverse cloud offerings plus managed services, such as security, backups, help desk multiple services enterprises Mix of public, private, and traditional IT services Complex pricing required for different services, bundles, promotions, and customers complex financial models No consistency across vendor bills and internal spreadsheets big manual effort Hard to scale as you acquire more customers multiple clients No ability to map consumption to organizational structure (departments, divisions, projects) 39

40 Cost Management for Enterprises & Service Providers ANALYTICS FOUNDATION Enterprise Service Providers COST TRANSPARENCY AUTOMATED CHARGEBACK DECISION ANALYTICS BUDGETS & ALERTS AUTOMATED BILLING SELF-SERVICE REPORTING TRENDS & FORECASTS PROFIT ANALYSIS MULTI-SOURCE COLLECTORS FLEXIBLE DATA TRANSFORMATION FLEXIBLE PRICING CUSTOM DASHBOARDS 40

41 Demo: Cloud Cruiser

42 Integrating Solutions for Windows Azure Pack

43 Benefits of Adding Cloud Cruiser & 5nine Software Completes the Microsoft cloud solution stack with best-in-class IT financial management and security Protects your cloud investment Automates security and financial controls which saves money, time, & risk Provides 24x7 visibility into the health of your cloud Improves customer satisfaction and trust Provides additional revenue opportunities nine Software Inc.

44 Case Study: Monetizing Value-added Services Track and bill for 5nine security products, such as firewall and intrusion detection 44

45 Resources Cloud Cruiser Cloud Cruiser Product Overview: Cloud Cruiser for Azure Pack: Microsoft Virtual Academy: Cloud Cruiser for Azure Pack: Datasheet: Cloud Cruiser for Windows Azure Pack Brief_Microsoft-Azure-Pack1.pdf Webcast: Microsoft Hybrid Cloud: Best of Both Worlds 5nine Software 5nine Cloud Security: 5nine Cloud Security Azure Pack Extension: Microsoft Virtual Academy: 5nine Cloud Security for Azure Pack: Solutions/10 Whitepaper: Challenges of Securing Hosted Hyper-V Multi-Tenant Environments: ment.pdf Upcoming webinars: nine Software Inc.

46 Thanks for joining us today! Let s connect! Cloud Cruiser info@cloudcruiser.com 5nine Software info@5nine.com nine Software Inc.