FeaturesThe following is a list of the key features of VMware vShield Zones. For
a comprehensive list of VMware vSphere features download the key features summary.
Central Management of Logical Zone Boundaries and Segmentation- Leverage
existing virtual infrastructure containers – hosts, virtual switches, VLANs – as logical trust or organizational
zones
- Define policies to bridge, firewall, or isolate network traffic between zone boundaries
- Manage and
deploy policies across entire VMware vCenter Server deployment
- Integrate with VMware vCenter Server and automatically
deploy on existing virtual networks
- Scan and discover existing applications running on virtual machines to identify
application protocols
Network Enforcement and Flow Monitoring- Classify
traffic by network or application protocol (e.g. HTTP, RDP, SNMP)
- Performantly filter traffic with stateful packet
inspection (SPI)
- Track dynamic port connections for protocols such as FTP
- Track network connections across
VMware VMotion migration events.
- Easily convert observed network flows into precise network enforcement rules.
- Monitor
both allowed and disallowed activity
Management and Reporting- Access
the Web-based vShield Manager interface remotely from any Web browser
- Configure administrators to be common with
VMware vCenter Server or distinct for separation of duties and roles
- View activity hierarchically at individual virtual
machine or aggregate levels and generate graphical or tabular reports
- Retain log data for archival and compliance
purposes
- Export events and data using syslog format
|