Securing the Private Cloud
Defined as an environment in which you are responsible for the management of all aspects of the virtualization, hardware, compute, networking, security, and so forth, a private cloud is often considered to be an extension of your existing data center. The VM-Series enables you to protect your private cloud infrastructure using application enablement policies while simultaneously preventing known and unknown threats. The VM-Series supports the following private cloud environments: VMware ESXi™ and NSX™, Citrix Netscaler® SDX™, Microsoft Hyper-V® and KVM/OpenStack®.
Protecting Mission-Critical Applications and Data Using Zero Trust Principles
Security best practices dictate that your mission-critical applications and data should be isolated in secure segments using Zero Trust (“never trust, always verify”) principles as a means of controlling access.
Our zone-based policy architecture enables you to use the VM-Series to build access control policies based on the application and the user, effectively segmenting the applications and protecting east-west traffic between virtual machines.
Blocking Lateral Movement of Cyberthreats
Today’s cyberthreats commonly compromise an individual workstation, or user, and then move across the network, looking for a target. Within your virtual network, cyberthreats move laterally from VM to VM in an east-west manner, placing your mission-critical applications and data at risk.
Exerting application-level control using Zero Trust principles in between VMs will reduce the threat footprint while applying policies to block both known and unknown threats.
Security that Keeps Pace with Your Business
Panorama™ network security management enables you to manage your VM-Series deployments, along with your physical security appliances, thereby ensuring policy consistency and cohesion. Rich, centralized logging and reporting capabilities provide visibility into virtualized applications, users and content.
To automate firewall deployments and policy updates, you can use a combination of Bootstrapping, an XML API and native management features to deploy fully configured firewalls in minutes and dynamically drive security policy updates based on workload changes.
The VM-Series is comprised of the VM-1000-HV, VM-300, VM-200 and VM-100. To learn more about the VM-Series performance and capacities, please visit the firewall comparison tool.