At RSA 2012 Symantec and VMware announced five new security integrations with the VMware cloud infrastructure suite designed to deliver extensive protection for virtual and cloud environments along with operational cost savings. With new VMware integrations, Symantec enables joint customers to completely protect their virtual infrastructure and business-critical applications with data loss prevention, IT risk an compliance, data center protection, security information and event management (SIEM) and endpoint protection solutions – delivering unparalleled security, scalability and cost reductions for rapid services delivery and enhanced business agility for the cloud.
1. Symantec and VMware
Deliver Extensive Protection
for Virtual and Cloud Environments
February 28, 2012
Symantec Virtualization Security 1
2. State of Virtualization Security
• Traditional Threats:
– Targeted Malware
– Data Loss
– Audit Scope Creep
– Configuration Drift
– Security updates and patching
• New Risks Introduced:
– Accelerated provisioning
– Mixed-trust workloads
– New Security Stakeholders
– Hypervisor layer controls
– Poor visibility and control
2
Symantec Virtualization Security
3. Virtual Security You Need, Trust You Expect
RSA Announcement: VMware-ready Protections
Orchestrated prevention of data loss across dynamic
workloads.
Reduced compliance deficiencies across converged
infrastructure.
Trusted integrity of your virtual fabric.
Real-time virtual threat telemetry to mitigate risk.
Optimized endpoint protection for high density
environments.
3
Symantec Virtualization Security
4. Symantec Virtualization Security News Summary
• Announces broad VMware integrations
– Symantec Critical System Protection
– Symantec Data Loss Prevention
– Symantec Control Compliance Suite
– Symantec Security Information Manager
– Symantec Managed Security Services
– Symantec Endpoint Solutions
• Incorporates API integrations, content and process workflows
• Extends security for virtual environments beyond just antivirus
– Infrastructure Security
– Information Security
Symantec Virtualization Security 4
6. Reduced compliance deficiencies
across converged infrastructure
Symantec Compliance Integration
• Across both virtual and physical
• Integrates VMware-prescribed
standards
• Identify VMs that are:
• Rogue
• Vulnerable
• Non-compliant Virtual
• Centralized visibility of risks Physical
6
Symantec Virtualization Security
7. Trusted integrity of your virtual fabric
Symantec Server Protection Integration
On Premise In the Cloud Key Capabilities
• Event Monitoring
VM1 VM2 VM3 Guest physical, virtual, or
Hypervisor hybrid
• File Integrity Monitoring
APP APP APP • Intrusion Detection
Management
NON- Server • Host Firewall
WINDOWS WINDOW OS APP • File & Configuration Lock
OS S OS
Down
OS • Admin Access Control
ESX/ESXi vCenter
• Malware & Exploit Prevention
• Device Control
• Application Control
Physical Virtual Cloud
7
Symantec Virtualization Security
8. Real-time virtual threat telemetry to mitigate risk
Symantec Security Monitoring Integration
OS
Antivirus
Firewall changes Database
Corporate
Infected systems
Additional Intelligence on: Network
Virus outbreaks
Malicious IPs Mail and
Groupware
Privileged user activities Firewalls
Botnet IPs
Worm IPs Other internal events…
Syslogs
IDS/IPS
vShield
Comprehensive Vulnerability
Scanners
Visibility
8
Symantec Virtualization Security
9. Proactive virtual fabric protection
Symantec Endpoint Solutions
Virtual Client Virtual Image Shared Resource Offline Image
Tagging Exception Insight Cache Leveling Scanning
Together – up to 90% reduction in disk IO
Symantec Virtualization Security 9
10. Symantec Virtualization Security News Summary
• Announces broad VMware integrations
– Symantec Critical System Protection
– Symantec Data Loss Prevention
– Symantec Control Compliance Suite
– Symantec Security Information Manager
– Symantec Managed Security Services
– Symantec Endpoint Solutions
• Incorporates API integrations, content and process workflows
• Extends security for virtual environments beyond just antivirus
– Infrastructure Security
– Information Security
Symantec Virtualization Security 10