VMware vShield App with Data Security

"Protect Applications from Network-Based Threats"


Protect applications in the virtual datacenter from network-based attacks, and discover sensitive data, with VMware vShield™ App with Data Security, part of the VMware vShield family of virtualization security products. It scans within virtualized workloads for sensitive data - such as credit card information - and reports violations of regulations (such as PCI-DSS), enabling IT organizations to quickly assess the state of compliance with regulations from around the world. Also included is VMware vShield Endpoint, which offloads antivirus file scanning, minimizing antivirus “storms”.

• Reduce the risk of noncompliance through visibility into sensitive data stored in virtual machines
• Increase visibility and control over network communications between virtual machines
• Eliminate the need for dedicated hardware and VLANs to separate security groups from one another

vShield App with Data Security adds Sensitive Data Discovery across virtualized resources, enabling IT organizations to quickly assess the state of compliance with regulations from across the world.

Get Application Protection from Network-Based Threats

Protect your applications against internal network-based threats and reduce the risk of policy violations within the corporate security perimeter using application-aware firewalls with deep packet inspection and connection control based on source and destination IP addresses. Because VMware vShield App with Data Security plugs directly into VMware vSphere you can create and manage policies that adapt to dynamic cloud environments.

As a hypervisor-based application-aware firewall solution, VMware vShield App installs on each VMware vSphere host and controls and monitors all traffic between virtual machines using business-relevant policies. Apply these policies to logical, dynamic application boundaries (security groups) instead of physical boundaries.

Address common challenges to application security within virtualized environments as you:

• Eliminate blind spots: Define and enforce granular policies for all traffic between applications, increasing visibility into traffic while helping to eliminate detours to physical firewalls.
• Maintain change-aware protection: Ensure network topology changes do not impact application security with continuous firewall protection for virtual machines as they migrate from host to host.
• Accelerate IT compliance: Get increased visibility and control over virtual machine network security with the logging and auditing controls you need to demonstrate compliance with internal policies and external regulatory requirements.

Secure Business-Critical Applications

Easily support applications belonging to different trust levels on the same virtual datacenter (for example, production and development, finance and sales, classified and nonclassified applications.) The hypervisor-level firewall in VMware vShield ensures that proper segmentation and trust zones are enforced for all application deployments.