RSA Solutions for VMware and Vblock. Dominique Dessy Senior Technical Consultant

Transcription

1 RSA Solutions for VMware and Vblock Dominique Dessy Senior Technical Consultant

2 Agenda What is a Vblock? RSA s Approach to Securing Vblock Typical use cases

3 Vblock A New Way of Delivering IT to Business Rapid deployment model of virtualized infrastructure Pre-integrated and validated solutions reduce total cost of ownership Service-level driven through predictable performance and operational characteristics Improved compliance/security and reduced risk

4 Vblock A New Way of Delivering IT to Business Best of breed technologies Compute: Cisco UCS Network: Cisco Nexus family, Cisco MDS 9000 series Storage: EMC Symmetrix V-Max or EMC Unified Storage (Celerra and CLARiiON) Hypervisor: VMware vsphere 4 Management: Cisco UCS Manager, EMC Ionix Unified Infrastructure Manager, VMware vcenter Security: RSA 4

5 RSA s Approach to Securing Vblock Extend customer s existing RSA investments to the virtual infrastructure and deliver new capabilities Layer onto Vblock architecture: User authentication Compliance monitoring and reporting Infrastructure security Data loss prevention Validate RSA with Vblock Infrastructure Packages in the VCE Lab 5

6 RSA s Approach to Securing Vblock 2 Secure each application validated with Vblock (e.g., VMware View, SAP) Central Security Management and Reporting 1 Secure the core Vblock platform (VMware, Cisco, EMC components) 6

7 Secure the Core Vblock Platform Secure Administrative User Access RSA SecurID authentication for: ESX Service Console vsphere Management Assistant Security Monitoring & Reporting RSA envision monitoring for: vcenter ESX and ESXi EMC Symmetrix, CLARiiON and Celerra storage Cisco UCS Validated with Vblock 7

8 Secure the Core Vblock Platform Validated with Vblock Vmware Administrator vsphere Management Assistant vsphere Security and compliance officer RSA SecurID UCS RSA envision Strong authentication before access to ESX Service Console and vsphere Management Assistant Storage Comprehensive visibility into security events Security incident management, compliance reporting 8

9 RSA envision Collector envision Collector uses the VMware SDK to retrieve the logs from vcenter and all ESX/ESXi servers Collector connection RSA envision system

10 envision Dashboard: Monitoring Vblock Event Sources by Event Category 10

11 envision Dashboard: Vblock VCE Event Sources Activity by Event Category

12 Use Case Scenarios Lost Laptop Protecting Management Console Applying Patch to Production System Unauthorized Administrator 17

13 So how does VDI make me more secure? 18

14 How VDI addresses the Lost Laptop Scenario Secure Network SSL + 2FA Laptop with NO sensitive data Virtual Desktop with access to sensitive data Application with sensitive data Virtual Desktop No USB or only secure USB allowed via DLP Network access controlled via VMware vshield Zones The process is fully logged by SIEM 19

15 Scenario Protecting Your Management Console Remote desktop into your Management LAN via VPN Management LAN vcenter Server ESX Service Console Vblock Management Console SSL VPN supporting RSA SecurID 20

16 Scenario Apply Patch to Production System Production Environment HR Application Server VM PATCH Test Environment HR Application Server VM PATCH HR Database Server VM HR Database Server VM HRDB Name, SSN, DoB, etc HRDB Name, SSN, DoB, etc Is the test 1 environment Is this A common an way to apply patches Clone is virtual to try Who environment them accessed out in a the test environment Was the VM 3 sufficiently Apply Patch protected 2to production Test & authorized Patch data in environment the test destroyed after it In a virtual world This is controlled? you difficult can and clone time-consuming the system, in data a production and all procedure? environment? was used? environment, but very easy in a virtual environment 21

17 Scenario Apply Patch to Production System Production Environment HR Application Server VM PATCH Test Environment HR Application Server VM PATCH HR Database Server VM HR Database Server VM HRDB Name, SSN, DoB, etc HRDB Name, SSN, DoB, etc 3 Apply 1Patch Clone 2to production virtual Test Patch environment VM Cloned RSA envision VM Cloned can log the Patch Applied administrative activity from vcenter, like the VM being cloned 22 RSA envision Patch Applied Patch Applied protected, VM then Deleted it will also If this is out of policy If the test we environment can alert a security is properly analyst be monitored by RSA envision

18 Scenario Unauthorized Administrator PCI Zone Non-PCI Zone Store Management Windows VM Transaction Management Application Transaction DB Credit Card numbers In a PCI environment, you Suppose permissions are set up need VM to validate Movedthat only incorrectly, and an unauthorized authorized administrators administrator by kpbrady can move a VM are modifying the system RSA envision Authorized PCI Admin? Active Directory 23 RSA If the envision administrator RSA envision can check is logs not what against authorized, activities a watchlist RSA of envision authorized were can performed alert PCI administratorsa security and by analyst whom

19 What s available today? RSA envision support for Vblock Cisco UCS Cisco network EMC Ionix UIM EMC storage solutions Symmetrix Clariion Celerra RSA Solution for VMware View RSA DLP Endpoint RSA SecurID agent built-in to VMware View RSA envision Collector for VMware vcenter RSA envision support for VMware View

20 RSA SecurBook for VMware View RSA Solutions Multi-product solutions Validated in the RSA Solutions Center RSA SecurBooks Guides for planning, deploying, and administering RSA solutions. Comprehensive reference architecture, screenshots, practical guidance 25

21 Learn More New RSA Landing Page at VMware.com RSA content RSA Video Build a Solid Foundation for Secure Virtualization with RSA ta_2thepoint.htm RSA SecurBook for VMware View A Guide for Deploying and Administering the RSA Solution for VMware View 26 rbook_vm_land.htm RSA White Papers Securing the Administration of Virtualization cure/ar/10781_ema_rsa- SecuringAdminVirtualization.pdf RSA Webinars Securing VMware Desktop and Server Environments with RSA 4.htm RSA Security Brief Security Compliance in a Virtual World

22