Virtualization & Cloud Industry News [28.01.09] January 28, 2009
Posted by Yves Peeters in Data Center Management, Server Virtualization.Tags: security, virtualization
add a comment
IGEL Introduces Groundbreaking Universal Desktop Thin Clients for Virtualization (more)
Arkeia Software Delivers Industry’s First Virtual Appliance for Backup of your Virtualization Environments (more)
Double-Take Software’s New GeoCluster Enables Cost Effective Stretch Clustering for Microsoft Hyper-V Virtualization (more)
Reflex Systems Announces Virtualization Management Center with Performance Monitoring (more)
CiRBA Version 5.1 Addresses New Capacity Management Demands (more)
Strong Authentication for Citrix WebInterface November 11, 2008
Posted by Roel Gydé in Data Center Management.Tags: security, Vasco, WebInterface
add a comment
Kate Brew interviews Chris Mayers (Principal Security Architect at Citrix) on the aspects of strong authentication. How integration with Citrix WebInterface is possible and what the immediate advantages are. (interview)
An interesting aspect in the interview is ‘biometrics’, we have worked on a lot of projects in which biometrics were against OTPs (like Vasco), almost in 99,5% the OTP security was enough. Chris gives a good view on why this might be the case. It is all about sending biometrical-data from a remote system to the network. Biometrical data has much value to a hacker than OTP values, afterall your fingertip does not change every time you push a button.
TOPIC: Security in virtualized data centers … reports October 9, 2008
Posted by Roel Gydé in Data Center Management.Tags: security
add a comment
Server virtualization has entered over the last year the data center, normally new technologies are well-tested before they enter production data centers. Yet server virtualization initially has not been set to the test. Currently more and more signs show that security might be weak point within the solutions.
Both Embotics and Market & Research have released whitepapers and reports on the subject. One thing is for sure the security risks with physical devices are exactly the same for virtualized devices and perhaps the risks are bigger as the virtualization layer is a new OS, which equals a new attack. When running multiple hosts on the same phyiscal server, you can even have the risk of intrahost-attacks. …
The full Embotics report
Recently the ‘Government Computer News’ reports on a survey released by nCircle Inc that security is a doubtfull matter for more than half of the respondents. In that survey, 47 percent (on 200 respondents) said they didn’t think the security methodologies around current virtualization programs were sound at all. Another seven percent of respondents ranked virtualization security in the “maybe/ depends” category.
Third Brigade introduces free firewall for cloud security September 16, 2008
Posted by Roel Gydé in Uncategorized.Tags: security, Third Brigade
add a comment
Third Brigade has announced a free host-based firewall for securing virtual machines and cloud computing. As the foundation for re-establishing consistent security policy on cloud computing resources, the Third Brigade Deep Security Firewall enables tighter security policy to be applied on systems that have moved from internal (private) to external (public) computing clouds.
More info.
VMworld 2008 – Industry News in the shadow of VMworld September 16, 2008
Posted by Roel Gydé in Uncategorized.Tags: Alive, application management, Appsense, BMC, Cisco, compliancy, Configuresoft, Datacore, DMTF, Elastra, Environment Manager, health monitoring, Integrie, iQ2850 iSCSI, iQstor Networks, NX-OS, OVF, Reflex Security, security, service manaement, Virtual Iron, Virtualization Management Center, VMAN, vmSight, VN-Link
add a comment
What has happened besides the Keynote Session at Vmworld, today in the world of Virtualization:
- DTMF has announced VMAN (Virtual Manaement Initiative and released OVF (more info here)
- Cisco has announced the Vitual Switch …
Cisco announces the VN-Link initiative. VN-Link is delivered through the virtual switch Nexus 1000V, software built on NX-OS, that plugs into ESX (4) and that can be configured through the familiar Cisco CLI. Availability is foreseen for 1H2009, you can enroll for a beta program here. Furthermore the solution will be open to 3rd parties, more information to come in the second keynote tomorrow.
- iQstor Networks’ iQ2850 iSCSI storage system has been certified for use with VMware Infrastructure
- vmSight Partners with Virtual Iron for Virtual Infrastructure and Service Management (add. info)
- Appsense release Environment Manager 8 for VMware (add. info)
- Configuresoft announces free utility to assure compliance of VMware ESX Deployments (add. info)
- Datacore will unveil four new important features within SANmelody/symphony
- Elastra joins VMware Ready program to deliver enterprise cloud application management (add. info)
- BMC and VMware will be expanding their partnership in automation and control
- Integrien previews Alive with features for VMware to remotely monitor the health of the VI (add. info)
- Reflex Security Inc. will release Virtualization Management Center (VMC) (add. info)
Symantec announced new back-up agent for Hyper-V September 16, 2008
Posted by Roel Gydé in Uncategorized.Tags: back-up, Hyper-V, security, Symantec
add a comment
Symantec announced a new Backup Exec 12.5 agent supporting Windows Server 2008 Hyper-V, as well as support for upcoming releases for Windows Essential Business Server 2008 and Windows Small Business Server 2008. Backup Exec 12 and Backup Exec System Recovery 8 were the first backup and recovery products certified for Windows Server 2008 when they were released in February 2008.
Backup Exec version 12.5 introduces a new Agent for Microsoft Virtual Servers which substantially improves the speed, flexibility and simplicity of backup and recovery for Hyper-V virtual systems. Backup Exec understands the structure of the Hyper-V environment and presents the same logical structure in the backup administrator GUI, so backup administrators can manage backup and recovery functions for their physical and virtual systems via the consol
More info.
Stonesoft Introduces StoneGate Virtual IPS for Granular Protection of Virtual Environments – Stonesoft September 10, 2008
Posted by Roel Gydé in Uncategorized.Tags: security, StoneGate Virtual IPS, Stonesoft
add a comment
Stonesoft, an innovative provider of integrated network security and business continuity solutions, today introduced the StoneGate Virtual IPS (Intrusion Prevention System) to protect internal networks from malicious traffic. The release of this solution brings the granular packet inspection and intelligent event correlation capabilities of the physical StoneGate IPS appliance to the virtual world.
In-depth, intelligent event correlation of activity between IPS appliances to reduce false positives and negatives.
Advanced blacklisting and whitelisting capabilities in conjunction with StoneGate virtual and/or physical appliances
Hybrid mode IPS uniquely operates in monitoring and/or prevention mode simultaneously on the same virtual machine
Certified for the VMware ESX platform and will support VMsafe technology
Flexible support for a wide range of architectures and virtual platforms
Full release here
Haletky on VM security & forensics July 28, 2008
Posted by Roel Gydé in Uncategorized.Tags: forensics, security
add a comment
Edward Haletky posted an article on cio.com, which reflects his toughts on virtualization forensics and virtualization security. Now that we are at the gate of the big virtualization boom, forensics and security become more and more important. Edward has stuck to VMware and clear sends a message to VMW:
“There is a need for better tools and information from VMware to make forensic acquisition and analysis a reality within the virtual infrastructure.”
Full article can be found here.
Personally I am wondering if this reaction of the vendors will depend on their hypervisor solution: open (like KVM, Xen) or closed (like VMware). Furthermore this article also touches the topic of general security, what will happen with the current security vendors active in the phyiscal world, will they adapt their solutions to a virtualized environment or can we expect a new bunch of players looming aroudn the corner?
Tresys announces desktop virtualization security solution June 18, 2008
Posted by Roel Gydé in Uncategorized.Tags: security, Tresys, VM Fortress
add a comment
Tresys announced the availability of Tresys VM Fortress – a patent-pending secure desktop virtualization technology for organizations seeking strong security and operational integrity. VM Fortress gives organizations with high-end security needs the ability to utilize desktop virtualization without compromising protection by strengthening the guest operations system and the virtualization software itself to withstand the most threatening of compromises. VM Fortress provides a level of security high above most conventional requirements, which enables mission-critical organizations to leverage desktop virtual machine (VM) technology.
The TOP 10 thing you MUST read about VMware … June 9, 2008
Posted by Roel Gydé in Uncategorized.Tags: security, troubleshooting, VMware
add a comment
Citrix releases secure access solution for Virtual Desktops June 9, 2008
Posted by Roel Gydé in Uncategorized.Tags: Access Gateway, security, Smart Access, VDI, XenDesktop
add a comment
The latest release of Access Gateway includes the necessary secure access software in order to provide secure access to a virtual desktop. This release 8.1 includes
- Smart Access: determing the rights on a virtual desktop based on a role (including system, user, link, active processes, …) …
- Improved scalability …
- Fast configuration & deployment …
Catbird and Apani: security for a virtual environment June 9, 2008
Posted by Roel Gydé in Uncategorized.Tags: Apani, Catbird, security
add a comment
Now that (according to Forrestor) application and server virtualization have become mature and pay-off, a number of new issues needs to be addressed, such as security in virtual environments. Catbird and Apani are two companies that address these issues, more information in this podcast.
