Virtual Desktop Tools

VMware Redefines Networking and Security for Multi-Cloud with New Innovations

VMware
VMware Explore US 2022 – VMware Inc.today announced new innovations across its expanding networking and security portfolio that will help customers embrace the cloud operating model. These new innovations include:
  • Project Northstar for multi-cloud networking, security and end-to-end visibility
  • Expansion of network detection and visibility to the Carbon Black Cloud endpoint protection platform, with early access available now
  • Project Trinidad that extends and advances VMware’s API security and analytics
  • Project Watch, a new approach to multi-cloud networking and security that provides advanced app to app policy controls


“Enterprises are facing an unprecedented level of threat and complexity as they operate in today’s multi-cloud world, VMware is radically transforming how our customers consume networking and security – allowing them to realize the agility and efficiencies of the cloud operating model through a cloud-smart approach. With a privileged position in the infrastructure and a scale out distributed software architecture, we’re able to leverage the intrinsic attributes of our platforms and deliver these unique solutions in a consumption-oriented manner.”

Tom Gillis, senior vice president and general manager of VMware’s Networking and Advanced Security business group

Simplifying Networking and Security for Multi-Cloud
In Project Northstar, VMware announces a major advancement of its NSX platform. Announced in technology preview today, Project Northstar will transform how enterprises consume networking and security in a multi-cloud world. Project Northstar will deliver multi-cloud networking, security, workload mobility and end-to-end threat detection and response with a centralized cloud-console for consistent and simplified software-as-a-service (SaaS) consumption. This family of services includes network & security policy management, network detection and response (NDR), network visibility and analytics (NSX Intelligence), advanced load balancing (ALB), and workload mobility (HCX) for private cloud environments and VMware Cloud deployments.

“As an innovator in software-defined networking, VMware offers a full-stack of networking and security services in an integrated solution that benefits thousands of enterprise customers today,” said Umesh Mahajan, senior vice president and general manager for VMware’s Networking and Security business unit. “Customers are seeking a uniform policy model across multi-cloud deployments, along with consistent network connectivity, security, and load balancing services. With Project Northstar we continue to shape how enterprises consume networking and security in a multi-cloud world.”

Today, with the latest update to VMware NSX 4.0 and VMware vSphere 8, NSX networking and security functions can now be implemented on Data Processing Units (DPUs, also known as SmartNICs) connected to the host hypervisor. Offloading NSX services to the DPU can accelerate networking and security functions without impacting the host CPUs, addressing the needs of modern applications and other network-intensive and latency-sensitive applications.

Strengthening Lateral Security
The growth in laterally moving threats requires security teams to pay closer attention to east-west network traffic. Examining traffic through network taps is no longer sufficient. Modern distributed cloud architectures can further exacerbate blind spots. VMware’s architecture allows customers to see processes running in an endpoint, packets crossing the network, access points, and the inner workings of both traditional and modern apps to identify and stop threats others can’t. As part of today's announcements, VMware is strengthening its lateral security capabilities by embedding network detection and visibility into Carbon Black Cloud's endpoint protection platform, which is now available to select customers in early access. This extended detection and response (XDR) telemetry adds network detection and visibility to endpoints with no changes to infrastructure or endpoints, providing customers with extended visibility into their environment across endpoints and networks leaving attackers nowhere to hide.

Limited visibility into the east-west traffic between microservices also puts modern applications at greater risk. Project Trinidad, which is in tech preview, extends VMware's API security and analytics by deploying sensors on Kubernetes clusters and uses machine learning with business logic inference to detect anomalous behavior in east-west traffic between microservices.

Findings from VMware’s recent Global Incident Response Threat Report reveal that ransomware actors continue to evolve their cyber extortion strategies. Ransomware will continue to be a business reality, and VMware uniquely makes recovery from an attack faster, more predictable, and less prone to error with VMware Ransomware Recovery for VMware Cloud DR, a new offering unveiled at VMware Explore. This new, purpose-built ransomware recovery-as-a-service solution enables safe recovery that prevents re-infection of IT and line-of-business production workloads through its innovative use of an on-demand isolated recovery environment on VMware Cloud on AWS. Guided recovery workflows allow customers to quickly identify recovery point candidates, validate restore points using embedded behavioral analysis, and recover data with minimal loss.

Expanding Security for the Data Center and Cloud Edge
Last year, VMware announced the industry-first elastic application security edge (EASE) which enables the networking and security infrastructure at the data center or cloud edge to flex and adjust as app needs change. To help customers preserve their investments in expensive hardware appliances that are incapable of adapting to changing app environments, VMware is introducing:

VMware NSX Gateway Firewall: VMware’s next-generation firewall now offers a new stateful active-active edge scale-out capability that significantly increases network throughput for stateful services. VMware now offers advanced threat prevention capabilities with IDPS, malware analysis, sandboxing, URL filtering, TLS proxy, stateful firewall, and stateful Network Address Translation (NAT) that extend centralized security controls to physical and virtual workloads at the data center and cloud edge.

VMware NSX Advanced Load Balancer: With a goal to deliver multi-layer application security at the edge, closer to applications and users for better efficiency and performance, VMware NSX Advanced Load Balancer (ALB) is adding new bot management capabilities, while enhancing the security capabilities of its web application firewall, malware detection, security analytics, and DDoS protection. These enhancements at the edge help customers maintain a consistent security posture with operational simplicity, extending protection from traditional to cloud-native container-based applications deployed across multi-cloud environments. VMware NSX ALB’s ability to enforce API security policies in line with application delivery traffic helps customers in protecting their north-south APIs.

Project Watch: At VMware Explore 2022, VMware is unveiling Project Watch, a new approach to multi-cloud networking and security that will provide advanced app-to-app policy controls to help with continuous risk and compliance assessment. In technology preview, Project Watch will help network security and compliance teams to continuously observe, assess, and dynamically mitigate risk and compliance problems in composite multi-cloud applications.
Securing the Edge for the Distributed Workforce

In the past two years, enterprise customers have fundamentally changed how they build and deploy networks and access to support distributed workers. The market for secure access service edge (SASE) solutions is expected to nearly triple by 2026 with security being a key driver of growth as enterprises strategically invest for the new age of distributed applications and hybrid work, according to the Dell'Oro Group1. A leader in SD-WAN2, VMware is now offering additional deployment flexibility to customers who want a multi-phase journey from their current network and endpoint management solutions to a next-generation SASE offering by adding new web proxy-based connectivity to VMware Cloud Web Security.

VMware Cross-Cloud™ services Helps Customers Navigate the Multi-Cloud Era
At VMware Explore 2022, VMware is unveiling new and enhanced offerings for VMware Cross-Cloud services to help customers navigate the multi-cloud era with freedom, flexibility and security. VMware Cross-Cloud services is a portfolio of cloud services that deliver a unified and simplified way to build, operate, access, and better secure any application on any cloud from any device. VMware Cross-Cloud service pillars include 1) App Platform, 2) Cloud Management, 3) Cloud & Edge Infrastructure, 4) Security & Networking, and 5) Anywhere Workspace. For the latest news and more on how VMware is delivering a faster and smarter path to cloud for digital businesses, visit the VMware Explore 2022 media kit.

About VMware Explore
VMware Explore is an evolution of the company's flagship conference, VMworld. VMware Explore aims to be the industry’s go-to-event for all things multi-cloud. This year, it will feature industry-led solution and technical sessions, an extensive ecosystem of 90% of the top cloud partners, a thriving marketplace of multi-cloud ISVs and several networking events. To learn more about VMware Explore, please visit: www.vmware.com/explore.html.

About VMware
VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda.About VMware
VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda.

Spotlight

Other News
Virtual Desktop Tools, Virtual Desktop Strategies

Leostream Enhances Security and Management of vSphere Hybrid Cloud Deployments

Business Wire | January 29, 2024

Leostream Corporation, the world's leading Remote Desktop Access Platform provider, today announced features to enhance security, management, and end-user productivity in vSphere-based hybrid cloud environments. The Leostream platform strengthens end-user computing (EUC) capabilities for vSphere users, including secure access to both on-premises and cloud environments, heterogeneous support, and reduced cloud costs. With the Leostream platform as the single pane of glass managing EUC environments, any hosted desktop environment, including individual virtual desktops, multi-user sessions, hosted physical workstations or desktops, and hosted applications, becomes simpler to manage, more secure, more flexible, and more cost-effective. Significant ways the Leostream platform expands vSphere’s capabilities include: Security The Leostream platform ensures data remains locked in the corporate network, and works across on-premises and cloud environments, providing even disparate infrastructures with the same levels of security and command over authorization, control, and access tracking. The Leostream platform supports multi-factor authentication and allows organizations to enforce strict access control rules, creating an EUC environment modeled on a zero-trust architecture. Multivendor/protocol support The Leostream platform was developed from the ground up for heterogeneous infrastructures and as the connection management layer of the EUC environment, the Leostream platform allows organizations to leverage vSphere today and other hypervisors or hyperconvergence platforms in the future as their needs evolve. The Leostream platform supports the industry’s broadest array of remote display protocols, including specialized protocols for mission-critical tasks. Consistent EUC experience The Leostream platform enables IT to make changes to the underlying environment while ensuring the end user experience is constant, and to incorporate AWS, Azure, Google Cloud, or OpenStack private clouds into their environment without disruptions in end-user productivity. By integrating with corporate Identity Providers (IdPs) that employees are already familiar with, and providing employees with a single portal they use to sign in, the Leostream platform offers simplicity to users too. Connectivity The Leostream Gateway securely connects to on-prem and cloud resources without virtual private networks (VPNs), and eliminates the need to manage and maintain security groups. End users get the same seamless login and high-performance connection across hybrid environments including corporate resources located off the internet. Controlling cloud costs The Leostream Connection Broker implements automated rules that control capacity and power state in the cloud, allowing organizations to optimize their cloud usage and minimize costs, such as ensuring cloud instances aren’t left running when they are no longer needed. The Connection Broker also intelligently pools and shares resources across groups of users, so organizations can invest in fewer systems, reducing overall cost of ownership. “These features deliver a streamlined experience with vSphere and hybrid or multi-cloud resources so end users remain productive, and corporate data and applications remain secure,” said Leostream CEO Karen Gondoly. “At a time when there is uncertainty about the future of support for VMware’s end-user computing, it’s important to bring these options to the market to show that organizations can extend vSphere’s capabilities and simultaneously plan for the future without disruption to the workforce.” About Leostream Corporation Leostream Corporation, the global leader in Remote Desktop Access Platforms, offers comprehensive solutions that enable seamless work-from-anywhere environments for individuals across diverse industries, regardless of organization size or location. The core of the Leostream platform is its commitment to simplicity and insight. It is driven by a unified administrative console that streamlines the management of users, cloud desktops, and IT assets while providing real-time dashboards for informed decision-making. The company continually monitors the evolving remote desktop landscape, anticipating future trends and challenges. This purposeful, proactive approach keeps clients well-prepared for the dynamic changes in remote desktop technology.

Read More

Spotlight

Resources