VMware User Group vNews Alistair Sutherland

Agenda vCloud Director 1.0 vShield App, Edge, Endpoint View 4.5 Integrien acquisition Tricipher acquisition Ionix products

vCloud Director aka Redwood

VMware Cloud Infrastructure & Services Core IT Services via Virtual Appliances Zimbra File/ Print Directory SaaS SpringSource: Programming Model for the Cloud PaaS Redwood: Common Service Model for Infrastructure Clouds vCenter Management Suite: Policy-based Management & Automation vCloud Partners Enterprise Proprietary Clouds IaaS View: Desktop Computing via Cloud vSphere: Platform for Cloud Infrastructure Let's put our product portfolio if you will into context around this Cloud Computing environment. So I've divided the world up into Private Clouds, things that are happening inside the firewall or the data centers of enterprise IT customers. Then there is the VMware virtualized Public Clouds, our vCloud partners who are building compatible Cloud infrastructures based on VMware technology and then in the third world, the other Clouds that exist out in the marketplace. vSphere is the foundation, the platform for all of the Cloud infrastructure. You really cannot achieve the full benefits of Cloud Computing without getting to that concept of pooling and virtualization is the path to that concept. vSphere is the platform that delivers all of the capabilities required for achieving that Cloud Computing model and that pooling aspect. We think about View as an extension of that model, that architecture where I manage the desktops as a service that is managed and secured within my Cloud architecture and then delivered to users anytime, anywhere. So View extends the value proposition of Cloud Computing all the way out to the end devices that IT has to worry about in any organization. vCenter brings in that policy-driven management and automation at the infrastructure level. And a future initiative that we are working on is called Redwood and Redwood brings into context the service catalog, the self-service capabilities, and managing those services across multiple Cloud environments and that's the direction we're heading with project Redwood. This combination is VMware's infrastructure as a service offering which supports not only the Private Cloud, but those VMware virtualized Public Clouds as well. The next layer up the stack is the programming model for the Cloud. So SpringSource, for example, brought us Spring, the most widely used Java application framework in the world. Sixty percent of all Java applications developed today are developed on top of the Spring framework. Spring framework gives us a model by which developers can focus on application and business logic and the framework gets tied to the infrastructure to help optimize those applications and to help drive policy from the application framework into the infrastructure so that the infrastructure is more responsive. Spring enables a Cloud-ready, but yet a Cloud-independent application development model. And so, we continue to support Spring in our Platform as a Service, if you will, across not only the Private Cloud and our vCloud partners, but against other Clouds that exist in the marketplace as well. And then finally, our Software as a Service offering, Zimbra was the first instance of VMware acquiring a full software solution, Zimbra being that e-mail and collaboration solution, and what our intent here is to be able to take core IT services, things that every IT organization needs and is managing for the business that aren't necessarily differentiating that business and offer it as a Cloud-ready virtual appliance and Zimbra's the first example of that. The entire VMware portfolio is aimed at removing and reducing complexity in IT, leveraging a cloud computing approach. Here are the basics: vSphere, the industry’s leading virtualization platform, is the foundation for building out a cloud architecture. It is step 1 on the journey. View takes the benefits of pooling, automation, control, etc. into play for desktops, which is actually the largest workload base in the enterprise. Thus being built on and extending vSphere, since desktop virtualization IS a datacenter problem, and needs to conform into the cloud architecture. vCenter brings automation, simplification, etc. at the infrastructure level. Also note that vSphere + vCenter + View are used by cloud service providers to build out public cloud infrastructure as well. Same foundation for private and public clouds. “Redwood” is a project that is delivering the next level of abstraction, managing services across cloud infrastructure – both private and public. It will become the common management model across private clouds and VMware virtualized public clouds (i.e. vCloud partners). Springsource presents the frameworks and programming model for the cloud, freeing developers from having to be concerned with how and where to deploy applications, whether internally in a private cloud, in a VMware virtualized public cloud, or in any public cloud. VMware is working to optimize Spring-based application deployment into VMware Virtualized cloud environments, but will continue to support full customer choice of deployment destinations. Finally, we are also looking to deliver virtual appliances for common, core IT services that should just be available and reliable in any cloud environment. IT should not be spending valuable resource time on managing these services, so we are making it dramatically simpler through our virtual appliance offerings. Again, these will run in the private cloud inside the enterprise, on VMware Virtualized public clouds, or other public cloud offerings. VMware Virtualized Public Cloud Private Cloud Public Cloud

Delivering IT as a Service: The Private Cloud vCloud API User Access Self-service user access with metering, monitoring, and chargeback Redwood vCenter Chargeback Standardized Service Delivery Standardized services and service level definitions with automated service delivery Redwood Fully Virtualized Resources Virtual Datacenters Virtual Datacenters Virtual Datacenters In addition, we're pulling together the right architectural framework for them to be able to look at what does the future state architecture in my data center look like, fully virtualized resources with a standardized service delivery framework available in a self-service model and all of this based on open APIs so that those services can be deployed or managed in Private or Public Cloud infrastructure. The VMware model is built around this vision – we think of datacenter transformation into a compute factory – where individual piece parts are virtualized, aggregated and shared across many business units/users. The compute factory is aggregated into a standard set of services which are then available in packaged form for end users. Ultimately, this approach is about user-centricity, where they have on-demand access to the compute factory, without getting bogged down or delayed by the underlying details. Virtual Data Centers – Virtualized, shared pools of server, storage, and network resources Virtualized datacenter services (firewall etc) Policy-driven Management Redwood vSphere Enterprise Plus vCenter Management vShield Technology Resource Pools vSphere vSphere vSphere

New Resource Abstractions – Provider Virtual Datacenter Standard Service Tier of Infrastructure Compute: Cumulative block of CPU in GHz Cumulative block of RAM in GB Able to be subsequently allocated across organizations Max is vSphere cluster Network: Not an direct property of a Provider vDC Storage: Cumulative block of homogeneous storage Max of 256 datastores per Provider vDC Single metaphor and naming across both internal and external clouds for consistency

vShield

2010 – Introducing vShield Products Securing the Private Cloud End to End: from the Edge to the Endpoint Edge vShield Edge 1.0 Secure the edge of the virtual datacenter Security Zone vShield App 1.0 and Zones Application protection from network based threats Endpoint = VM vShield Endpoint 1.0 Enables offloaded anti-virus Virtual Datacenter 1 Virtual Datacenter 2 DMZ PCI compliant HIPAA compliant Web Test & Dev VMware is introducing the vShield family of products at VMworld. 2010. vShield solutions secure the edge of the virtual datacenter, protect virtualized application deployments from network-based threats, and streamline antivirus protection for all VMs by offloading AV processing to dedicated security VMs. vShield Edge protects the perimeter of a virtual data center, and provides services such as DHCP (Dynamic Host Config Protocol), NAT (Network Address Translation), Firewall, VPN and Web Load Balancing. vShield App protects application deployments from network based threats. It allows for flexible and elastic groupings of VMs based on business needs such as PCI, HIPAA, DMZ deployments. vShield App extends the basic vShield Zones capability that is included as part of vSphere advanced onward SKUs, by adding flexible VM grouping by user defined policies and supporting vCenter container based policies. vShield Endpoint enables efficient, offloaded AV processing. Partners such as Trend Micro, Symantec and McAfee will ship the security virtual machines that integrate with vShield Endpoint for offloaded AV processing. vShield Manager is the centralized deployment, management, reporting, logging, tracking and integration (REST based APIs) for all vShield products. VMware vSphere + vCenter

From inside the Guest to the Edge of the Cloud Overview From inside the Guest to the Edge of the Cloud In Guest VMVM OrgOrg vShield Endpoint vShield App vShield Edge vShield Edge is included with VMware Cloud Director

View 4.5

Feature Overview Extensibility Windows 7 Support PCoIP Automation and Integration with Powershell SCOM Support Reporting and Auditing Enablement Windows 7 Support PCoIP SmartCard Support with PCoIP FIPS Compliance Management Improvements Kiosk Mode (MAC-based client authentication) Automated USB Redirection Location-based Printing Real-time SmartCard Cert Revocation Increasing Scale and Efficiency Brokering Architecture for 10,000 VM pod Scalable Admin UI in Flex Role-Based Delegated Administration Semi-Automatic Pools Thin Provisioning Support with vSphere View Composer Performance Optimizations (local storage, temp file/page file redirection) ThinApp Assignment System and User Diagnostics Dashboard and System Monitoring User Troubleshooting System Troubleshooting View Composer Enhancements Support for SysPrep Refresh, Recompose & Rebalance for Non-Persistent Pools Tiered Storage Support Persistent Disk Management (Detach/Reattach/Archive) FIPS Certification is submitted for PCoIP Client Localization German, Japanese, French, and Simplified Chinese Local Mode Encryption, Smart Card, Replication & Policy Controls

Integrated Dashboard UI View Manager Admin UI ported to Admin Flex Dashboard View Reporting DB Delegated Admin Security Server Setup Improved Desktop Administrator User location and Filters Individual VM view - Coorelation with VC Automated USB Redirection View 4.5: Delta Training – Revision 1.0

Integrien Acquisition

Integrien – www.integrien.com Alive When to pay attention & What to pay attention to

Tricipher Acquisition

Tricipher MyOneLogin.com Single sign-on across SaaS and other cloud providers

myOneLogin Integrate myOneLogin Secure Sign Sign-On with myOneLogin authenticates user IDs and passwords against an internal Active Directory, while myOneLogin manages the strong authentication factors = your internal directory remains the one, centralized place to manage users Integrate myOneLogin with internal portals, such as SharePoint, so that users within your network can access web applications from their corporate portal Use myOneLogin to add strong authentication to SSL VPNs, so that external users accessing corporate resources can take advantage of secure, multi- factor authentication. Or just sign up for an account, setting up your users and applications, and letting users then self-provision to the service Future in Horizon…?

EMC Ionix Products

vCenter Product Family The vCenter Product Family focuses on 2 layers: infrastructure & operations and application management. Today we will be focusing on vCenter Configuration Manager

vCenter Configuration Manager Overview Deep Collection and Visibility Scalable, secure data collection, track changes to them automatically Compliance Policy Intelligence Ensure compliance with various industry and regulatory standards and requirements on a continuous basis Remediation and Patch Management Detect and fix configuration problems and security vulnerabilities automatically across multiple systems Server Provisioning and Application Stack Deployment Provision Linux, Windows and ESX images and optimized JeOS-based application stacks Multiplatform Support Support physical & virtual, Windows desktops and servers, UNIX and Linux servers, and vSphere Automation: vCM will help you increase the number of systems under management. It will also let you control cost and increase availability of trained systems administrators. Being able to understand and prioritize who needs to do what, leaving mundane tasks to less skilled admins, will help you and your organization deliver against set targets. vCM automatically tracks more than 80,000 configuration variables and detects changes to these values. Regulatory Compliance / Best Practices: vCM compares changes to policies to determine a violation, providing deep compliance capabilities. With vCM users can enable best practices and track adherence to corporate, industry and regulatory best practices and mandates . Customers have access to a wide variety of compliance related content to meet both general purposes and industry specific needs such as: Regulatory and industry: SOX, PCI, HIPPA Basel II, NERC/FERC, DISA/NIST Security and Pest Practices : CIS , Vendor specific e.g. Microsoft and VMware hardening guides Detect violations and remediate: vCM tracks more than 80,000 configuration variables and when change is needed, as it always is, vCM enables you to effectuate this by a “Right Click Fix”, which can be either immediate or scheduled, for a single system, machine group or for the complete data center. Furthermore, for every change completed (through vCM), vCM will keep an audit trail as well as the capability to roll back any unwanted or unapproved changes. Provisioning and Deployment vCM’s application stack management capabilities allow users to: Build, optimize, manage & deploy server software in physical, virtual & cloud infrastructures OS-level application dependencies identified automatically ‘Just enough operating system’ (JeOS) calculated in seconds Bare metal provisioning Application updates and deployments

vCenter Product Family The vCenter Product Family focuses on 2 layers: infrastructure & operations and application management. Today we will be focusing on vCenter Application Discovery Manager

vCenter Application Discovery Manager Overview Application Discovery Manager capabilities can be summarized in four categories: Passive discovery of your application infrastructure Active high-definition discovery of hardware and software configuration details Discovery analytics to visualize, analyze, and report on the collected data The hybrid discovery methodology of ADM intelligently combines 3 forms of discovery: passive network observations, active remote queries, and discovery analytics to result in discovery that is far less intrusive than competitive solutions. This discovery is completely agentless, so no additional software components need be distributed. Additional key points: (on left) ADM can collect from thousands of servers across a widely, geographically dispersed set of data centers (on bottom) ADM collect configuration, dependency, and change data that can be integrated into other 3rd party systems, CMDB, and vCenter Configuration Manager (on right) the ADM GUI presents dashboard summaries and the killer-app: detailed application dependency maps

Passively Discover Application Dependencies with vCenter ADM Title Month Year Passively Discover Application Dependencies with vCenter ADM Title Month Year ESX to VC Dependencies Remember to plan to protect all three of these! Virtualized On Relationship ESX server With ADM’s ability to discover tiered applications you can gain confidence in your ability to see all layers of a distributed application, continuously monitor them for configuration compliance with best practices, and ensure a smooth restart after a migration or site fail-over. ADM discovers many different types of dependencies – including dependencies between applications residing on the same or different ESX Servers. It can even discover dependencies between VMs that are managed by different vCenter Servers. ADM discovers VMs, ESX servers, dependencies, configuration details Relate individual parts of a VM infrastructure to the different application services / components VMs defined on each ESX including detailed configuration for each VM Display in maps Dependency between the virtual environment and the virtualized environment Dependencies (ESX -> Virtual Center, VM -> ESX, VM -> VM) VMs, ESX servers, Virtual Center, configuration files Detect relationships between VMs on the same physical server There could be a database server and app server and a web server all on the same physical server Listening to internal ESX traffic via a virtual collector vCollector deployed as a VM on ESX servers, using the customers VI infrastructure VMs Virtual to Virtual Dependencies Discover instances of DBs, Application servers, etc Physical to Virtual Dependencies Discover hidden dependencies, prepare for moves, build DR protection groups 23

vNews