4 Responses

  1. d_
    d_ at |

    VM's on the same host on the same vlan can talk directly to each other..So vShield App solves a problem VMware created themselves? 😉

    Reply
    1. @vcdxnz001
      @vcdxnz001 at |

      That's not actually true in all cases. Two VM's on the same VLAN but on different port groups can't directly communicate with each other through the host and must go out to the network. Likewise with VM's that are on isolated private VLAN's. But vShield App allows the inspection of every packet going through the host and enforce security policy effectively in the cases where VM's could communicate directly without going out to the network. It also gives security admins more visibility of the virtual environments and allows a separation of duties that would otherwise not be there. Having VM's with the ability to directly communicate without the overhead of going out to the network while still implementing the necessary security policy allows for much greater performance and lower latency than would otherwise be the case. So although this was a situation of having VM's directly communicate without network visibility was created by VMware it was done for a reason, and is not always the case depending on the solution you implement.

      Reply
  2. Tito
    Tito at |

    Heya

    Anyone tried this software known as SterJo Portable Firewall FREE?

    I some comments about the program.

    Thanks

    Reply
  3. Kernel Panic in vShield Manager after Upgrade to 5.1 « Long White Virtual Clouds

    […] It’s great to see that a lot of people are starting to consider upgrading to vSphere 5.1 and are upgrading their environments.  vCloud Networking and Security is one of the jewels in the crown for VMware and it’s expanded functionality, including high availability, means it is an even stronger candidate for enterprise firewall replacement in addition to it’s use cases with vCloud Director. I had used the previous version in an enterprise firewall replacement project and discussed that in Enterprise Firewall Replacement with vShield Edge and vShield App. […]

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.