VMWare Security for Remote Branches

							                                                                                                            SOLUTIONS DATASHEE T



          Manage Remote Servers and Desktops with
          VMware Infrastructure and Apani


Remote & Branch Office Challenges                                 Benefits of VMware Remote & Branch Office Management
Many critical business applications today reside outside          Solutions
the data center in remote locations. These distributed            Streamlined Management & Provisioning
sites often rely on centralized IT support, but the ability of
                                                                  • Provision	and	manage	virtual	machines	remotely. Enable IT
central IT staff to manage and protect remote sites is often
                                                                    staff to deploy and maintain remote servers and desktops from a
constrained by the following challenges:
                                                                    central data center to meet remote office needs without the need
•	Lack	of	on-site	IT	staff.	Because new servers must be             for hardware shipments and on-site visits.
  provisioned and shipped from headquarters, remote sites
                                                                  • Standardize	your	remote	office	infrastructure.	Use virtual
  experience lengthy turnaround times for their IT requests.
                                                                    machine templates and automated patch management to
  The need for central IT staff to troubleshoot remote servers
                                                                    standardize systems at all remote sites without worrying about
  in person results in costly support trips and extended
                                                                    disparate hardware or legacy applications.
  service downtime, which directly impacts the business.
                                                                  Improved Service & Availability
•	Ensuring	consistency.	Lack of a standardized hardware
  platform makes it difficult for central IT staff to support     • Ensure	availability	for	remote	servers.	Consolidate remote
  legacy applications, perform routine upgrades and                 office servers onto more reliable hardware while extending virtual
  maintenance, and meet rising demand for new                       infrastructure capabilities such as automated failover and load
  applications in remote sites.                                     balancing to remote sites.
•	Limited	space.	Remote sites are rapidly running out of          • Centralize	remote	office	backup	and	disaster	recovery. Protect
  space to accommodate new workloads, and existing                  remote office data without the cost and complexity of duplicating
  physical servers at these sites are not efficiently utilized.     remote office infrastructure, recover from site failures directly from
                                                                    the data center, and eliminate the need for manual tape backup
•	Limited	IT	budget.	Limited space and budget make it
                                                                    and other taskintensive processes.
  prohibitive to invest in specialized business continuity
  solutions or redundant hardware for remote sites. Although      Reduced Hardware & Operating Costs
  tape backups are affordable, they are error-prone, labor        • Lower	the	cost	of	operating	remote	office	hardware. Extend
  intensive to maintain and susceptible to theft or loss.           your server and desktop consolidation strategy to remote offices
Virtualization: a Better Way to Manage Remote &                     to improve hardware utilization while reducing cooling, energy,
Branch Office IT Environments                                       and real estate costs for remote IT environments.

VMware solutions give IT organizations the ability to control     • Minimize	server	and	desktop	hardware	expenditures.
and manage remote servers and desktops from a central               Facilitate rapid growth while reducing the amount of new IT
location. VMware provides a standardized deployment                 hardware you purchase for remote sites by provisioning new
platform that reduces the cost and complexity of remote             servers and desktops as virtual machines.
and branch office management while delivering higher              Learn More
levels of flexibility, availability, and data protection.
                                                                  To learn more about VMware solutions and products, visit
By virtualizing either at the remote site or back to the          http://www.vmware.com or call 1-877-4VMWARE.
data center, organizations can leverage existing data
center IT and personnel resources, thereby reducing cost,
effort, and downtime.
                                                                                                                                                                                                        V M WA R E 	 TA P 	 P R O G R A M   S O LU T I O N S D ATA S H E E T

Partner Solution Profile
                                                                                                     Accelerate Server Virtualization in Remote & Branch Offices
                                                                                                     with Apani® EpiForce® VM
                                                                                                     Remotely Manage Security Policies When Deploying VMware ESX
Apani
www.apani.com

ISV	Overview
                                                                                                     Industry Overview                                                                                    EpiForce VM assists companies in securing
                                                                                                                                                                                                          remote & branch offices and reduces
Apani provides security software to isolate and                                                      Finance, healthcare and retail businesses                                                            the attack surface area. This simplifies
protect both virtual and physical machines from a                                                    have an ethical and legal responsibility                                                             management and reduces the burden of
single management point.                                                                             to ensure customer privacy. They are                                                                 compliance audits.
                                                                                                     burdened with demonstrating compliance
Key	Business	Needs                                                                                   with a myriad of laws and regulations (e.g.                                                          Solution Benefits
Large organizations rely on a variety of physical,                                                   GLBA, SOX, PCI DSS, BCBS, FINRA, SB1386),                                                           • Accelerate remote and branch offices’
virtual and legacy servers. Vendors have historically                                                mitigating the risk of an internal data breach                                                        server virtualization by deploying
offered a silo approach to protecting them—                                                          and controlling access to data.                                                                       consistent, strong security across VMs and
each with their own management paradigm.
                                                                                                     These organizations deploy server                                                                     physical machines
Organizations need a way to streamline their
                                                                                                     virtualization in bank branches, health
data security by protecting virtual environments                                                                                                  • Manage all EpiForce VM-protected
                                                                                                     clinics and retail stores to achieve lower
and heterogeneous hardware with a single                                                                                                            machines through a single management
                                                                                                     hardware and operating costs, simplified
management solution.                                                                                                                                console, regardless of platform or physical
                                                                                                     IT management and energy savings. The          location and without the need to
                                                                                                     challenge is providing robust security to
Key	Business	Benefits                                                                                                                               reconfigure the network
                                                                                                     protect customer data at remote sites
Only Apani EpiForce VM provides a single solution
                                                                                                     without increasing management complexity. • Migrate virtual machines using VMotion
that secures both virtual and physical machines.                                                                                                    or VirtualCenter without compromising
Logical security zones isolate machines without                                                      Solution Overview                              security policy
reconfiguring the network, while policy-based
                                                                                                     Apani	EpiForce	VM	helps	organizations	       • Protect VMs from vulnerabilities introduced
encryption selectively encrypts data in motion.
                                                                                                     protect	their	customer	data	while	             through VM sprawl
EpiForce VM fully supports VMotion (hot) and cold
                                                                                                     realizing	the	benefits	of	server	
                                                                                                     virtualization	in	remote	&	branch	offices.	 • Cross-platform support secures complex,
migration and offers protection against VM sprawl.
                                                                                                                                                    heterogeneous environments
Business	Results                                                                                     Firewalls and VLANs are too static
                                                                                                                                                  • Granular and customizable failover
By providing robust data center security, Apani                                                      for securing a dynamic VMware ESX
                                                                                                                                                    procedures minimize remote site
EpiForce VM enables organizations to better realize                                                  environment and may expose customer
                                                                                                                                                    maintenance
the benefits of server virtualization, including                                                     data through configuration errors. Security
support for multiple platforms, automated                                                            solutions designed only for virtual machines • Security policy automatically reconfigures
migration, reduced unplanned downtime, lower                                                         force businesses to take a silo approach to    when a VM is restarted
operating expense tied to security policy changes                                                    data security, increasing complexity.
and more flexible management.
                                                                                                                                                                                                         VMware and Apani
                                                                                                     Regardless of whether a company’s servers
                                                                                                     are virtual or physical, centralized in the data                                                     Only Apani EpiForce VM enables
VMware	and	Apani                                                                                     center or remotely distributed, EpiForce                                                             organizations to secure both physical
Only Apani EpiForce VM provides a single solution                                                    VM cross-platform virtual security enforces                                                          machines and VMware ESX environments
that secures both virtual and physical machines                                                      software-based access control to critical                                                            with a single, centrally managed solution
running VMware ESX.                                                                                  customer data on those servers. To mitigate                                                          that supports both VMotion and cold
                                                                                                     the risk of an internal breach, EpiForce                                                             migration.
                                                                                                     VM encrypts customer data in motion
                                                                                                     within the corporate network to protect
                                                                                                     communications between sites.
                                                                                                     Virtual and physical systems, in the
                                                                                                     corporate data center or at remote offices,
                                                                                                     are conveniently managed from a central
                                                                                                     console. Security policy is maintained while
                                                                                                     machines are physically moved or during
                                                                                                     VMware VMotion or VirtualCenter migration.



VMware, Inc. 3401 Hillview Ave Palo Alto CA 94304 USA Tel 877-486-9273 Fax 650-427-5001 www.vmware.com
Copyright © 2008 VMware, Inc. All rights reserved. Protected by one or more of U.S. Patent Nos. 6,961,806, 6,961,941, 6,880,022, 6,397,242, 6,496,847, 6,704,925, 6,496,847, 6,711,672,
6,725,289, 6,735,601, 6,785,886, 6,789,156, 6,795,966, 6,944,699, 7,069,413, 7,082,598, 7,089,377, 7,111,086, 7,111,145, 7,117,481, 7,149,843, 7,155,558, 7,222,221, 7,260,815, 7,260,820, 7,268,683,
7,275,136, 7,277,998, 7,277,999, 7,278,030, 7,281,102, 7,290,253; patents pending. VMware, the VMware “boxes” logo and design, Virtual SMP and VMotion are registered trademarks or
trademarks of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies.