1. VMware User Group vNews
Alistair Sutherland

2. Agenda vCloud Director 1.0 vShield App, Edge, Endpoint View 4.5
Integrien acquisition
Tricipher acquisition
Ionix products

3. vCloud Director aka Redwood

4. VMware Cloud Infrastructure & Services
Core IT Services via Virtual Appliances
Zimbra
File/ Print
Directory
SaaS
SpringSource: Programming Model for the Cloud
PaaS
Redwood: Common Service Model for Infrastructure Clouds
vCenter Management Suite: Policy-based Management & Automation
vCloud Partners
Enterprise
Proprietary Clouds
IaaS
View: Desktop Computing via Cloud
vSphere: Platform for Cloud Infrastructure
Let's put our product portfolio if you will into context around this Cloud Computing environment. So I've divided the world up into Private Clouds, things that are happening inside the firewall or the data centers of enterprise IT customers. Then there is the VMware virtualized Public Clouds, our vCloud partners who are building compatible Cloud infrastructures based on VMware technology and then in the third world, the other Clouds that exist out in the marketplace. vSphere is the foundation, the platform for all of the Cloud infrastructure. You really cannot achieve the full benefits of Cloud Computing without getting to that concept of pooling and virtualization is the path to that concept. vSphere is the platform that delivers all of the capabilities required for achieving that Cloud Computing model and that pooling aspect. We think about View as an extension of that model, that architecture where I manage the desktops as a service that is managed and secured within my Cloud architecture and then delivered to users anytime, anywhere. So View extends the value proposition of Cloud Computing all the way out to the end devices that IT has to worry about in any organization. vCenter brings in that policy-driven management and automation at the infrastructure level. And a future initiative that we are working on is called Redwood and Redwood brings into context the service catalog, the self-service capabilities, and managing those services across multiple Cloud environments and that's the direction we're heading with project Redwood. This combination is VMware's infrastructure as a service offering which supports not only the Private Cloud, but those VMware virtualized Public Clouds as well. The next layer up the stack is the programming model for the Cloud. So SpringSource, for example, brought us Spring, the most widely used Java application framework in the world. Sixty percent of all Java applications developed today are developed on top of the Spring framework. Spring framework gives us a model by which developers can focus on application and business logic and the framework gets tied to the infrastructure to help optimize those applications and to help drive policy from the application framework into the infrastructure so that the infrastructure is more responsive. Spring enables a Cloud-ready, but yet a Cloud-independent application development model. And so, we continue to support Spring in our Platform as a Service, if you will, across not only the Private Cloud and our vCloud partners, but against other Clouds that exist in the marketplace as well. And then finally, our Software as a Service offering, Zimbra was the first instance of VMware acquiring a full software solution, Zimbra being that and collaboration solution, and what our intent here is to be able to take core IT services, things that every IT organization needs and is managing for the business that aren't necessarily differentiating that business and offer it as a Cloud-ready virtual appliance and Zimbra's the first example of that.
The entire VMware portfolio is aimed at removing and reducing complexity in IT, leveraging a cloud computing approach. Here are the basics:
vSphere, the industry’s leading virtualization platform, is the foundation for building out a cloud architecture. It is step 1 on the journey.
View takes the benefits of pooling, automation, control, etc. into play for desktops, which is actually the largest workload base in the enterprise. Thus being built on and extending vSphere, since desktop virtualization IS a datacenter problem, and needs to conform into the cloud architecture.
vCenter brings automation, simplification, etc. at the infrastructure level.
Also note that vSphere + vCenter + View are used by cloud service providers to build out public cloud infrastructure as well. Same foundation for private and public clouds.
“Redwood” is a project that is delivering the next level of abstraction, managing services across cloud infrastructure – both private and public. It will become the common management model across private clouds and VMware virtualized public clouds (i.e. vCloud partners).
Springsource presents the frameworks and programming model for the cloud, freeing developers from having to be concerned with how and where to deploy applications, whether internally in a private cloud, in a VMware virtualized public cloud, or in any public cloud. VMware is working to optimize Spring-based application deployment into VMware Virtualized cloud environments, but will continue to support full customer choice of deployment destinations.
Finally, we are also looking to deliver virtual appliances for common, core IT services that should just be available and reliable in any cloud environment. IT should not be spending valuable resource time on managing these services, so we are making it dramatically simpler through our virtual appliance offerings. Again, these will run in the private cloud inside the enterprise, on VMware Virtualized public clouds, or other public cloud offerings.
VMware Virtualized Public Cloud
Private Cloud
Public Cloud

5. Delivering IT as a Service: The Private Cloud
vCloud API
User Access
Self-service user access with metering, monitoring, and chargeback
Redwood
vCenter Chargeback
Standardized Service Delivery
Standardized services and service level definitions with automated service delivery
Redwood
Fully Virtualized Resources
Virtual Datacenters
Virtual Datacenters
Virtual Datacenters
In addition, we're pulling together the right architectural framework for them to be able to look at what does the future state architecture in my data center look like, fully virtualized resources with a standardized service delivery framework available in a self-service model and all of this based on open APIs so that those services can be deployed or managed in Private or Public Cloud infrastructure.
The VMware model is built around this vision – we think of datacenter transformation into a compute factory – where individual piece parts are virtualized, aggregated and shared across many business units/users. The compute factory is aggregated into a standard set of services which are then available in packaged form for end users.
Ultimately, this approach is about user-centricity, where they have on-demand access to the compute factory, without getting bogged down or delayed by the underlying details.
Virtual Data Centers –
Virtualized, shared pools of server, storage, and network resources
Virtualized datacenter services (firewall etc)
Policy-driven Management
Redwood
vSphere Enterprise Plus
vCenter Management
vShield Technology
Resource Pools
vSphere
vSphere
vSphere

6. New Resource Abstractions – Provider Virtual Datacenter
Standard Service Tier
of Infrastructure
Compute:
Cumulative block of CPU in GHz
Cumulative block of RAM in GB
Able to be subsequently allocated across organizations
Max is vSphere cluster
Network:
Not an direct property of a Provider vDC
Storage:
Cumulative block of homogeneous storage
Max of 256 datastores per Provider vDC
Single metaphor and naming across both internal and external clouds for consistency

7. vShield

8. 2010 – Introducing vShield Products
Securing the Private Cloud End to End: from the Edge to the Endpoint
Edge
vShield Edge 1.0
Secure the edge of the virtual datacenter
Security Zone
vShield App 1.0 and Zones
Application protection from network based threats
Endpoint = VM
vShield Endpoint 1.0
Enables offloaded anti-virus
Virtual Datacenter 1
Virtual Datacenter 2
DMZ
PCI compliant
HIPAA compliant
Web
Test & Dev
VMware is introducing the vShield family of products at VMworld
vShield solutions secure the edge of the virtual datacenter, protect virtualized application deployments from network-based threats, and streamline antivirus protection for all VMs by offloading AV processing to dedicated security VMs.
vShield Edge protects the perimeter of a virtual data center, and provides services such as DHCP (Dynamic Host Config Protocol), NAT (Network Address Translation), Firewall, VPN and Web Load Balancing.
vShield App protects application deployments from network based threats. It allows for flexible and elastic groupings of VMs based on business needs such as PCI, HIPAA, DMZ deployments. vShield App extends the basic vShield Zones capability that is included as part of vSphere advanced onward SKUs, by adding flexible VM grouping by user defined policies and supporting vCenter container based policies.
vShield Endpoint enables efficient, offloaded AV processing. Partners such as Trend Micro, Symantec and McAfee will ship the security virtual machines that integrate with vShield Endpoint for offloaded AV processing.
vShield Manager is the centralized deployment, management, reporting, logging, tracking and integration (REST based APIs) for all vShield products.
VMware vSphere + vCenter

9. From inside the Guest to the Edge of the Cloud
Overview
From inside the Guest to the Edge of the Cloud
In Guest
VMVM
OrgOrg
vShield Endpoint
vShield App
vShield Edge
vShield Edge is included with VMware Cloud Director

10. View 4.5

11. Feature Overview Extensibility Windows 7 Support PCoIP
Automation and Integration with Powershell
SCOM Support
Reporting and Auditing Enablement
Windows 7 Support
PCoIP
SmartCard Support with PCoIP
FIPS Compliance
Management Improvements
Kiosk Mode (MAC-based client authentication)
Automated USB Redirection
Location-based Printing
Real-time SmartCard Cert Revocation
Increasing Scale and Efficiency
Brokering Architecture for 10,000 VM pod
Scalable Admin UI in Flex
Role-Based Delegated Administration
Semi-Automatic Pools
Thin Provisioning Support with vSphere
View Composer Performance Optimizations (local storage, temp file/page file redirection)
ThinApp Assignment
System and User Diagnostics
Dashboard and System Monitoring
User Troubleshooting
System Troubleshooting
View Composer Enhancements
Support for SysPrep
Refresh, Recompose & Rebalance for Non-Persistent Pools
Tiered Storage Support
Persistent Disk Management (Detach/Reattach/Archive)
FIPS Certification is submitted for PCoIP
Client Localization
German, Japanese, French, and Simplified Chinese
Local Mode
Encryption, Smart Card, Replication & Policy Controls

12. Integrated Dashboard UI
View Manager
Admin UI ported to Admin Flex
Dashboard View
Reporting DB
Delegated Admin
Security Server Setup Improved
Desktop Administrator
User location and Filters
Individual VM view - Coorelation with VC
Automated USB Redirection
View 4.5: Delta Training – Revision 1.0

13. Integrien Acquisition

14. Integrien – www.integrien.com
Alive
When to pay attention & What to pay attention to

15. Tricipher Acquisition

16. Tricipher MyOneLogin.com
Single sign-on across SaaS and other cloud providers

17. myOneLogin Integrate myOneLogin Secure Sign Sign-On with
myOneLogin authenticates user IDs and passwords against an internal Active Directory, while myOneLogin manages the strong authentication factors = your internal directory remains the one, centralized place to manage users
Integrate myOneLogin with internal portals, such as SharePoint, so that users within your network can access web applications from their corporate portal
Use myOneLogin to add strong authentication to SSL VPNs, so that external users accessing corporate resources can take advantage of secure, multi- factor authentication.
Or just sign up for an account, setting up your users and applications, and letting users then self-provision to the service
Future in Horizon…?

18. EMC Ionix Products

19. vCenter Product Family
The vCenter Product Family focuses on 2 layers: infrastructure & operations and application management.
Today we will be focusing on vCenter Configuration Manager

20. vCenter Configuration Manager Overview
Deep Collection and Visibility
Scalable, secure data collection, track changes to them automatically
Compliance Policy Intelligence
Ensure compliance with various industry and regulatory standards and requirements on a continuous basis
Remediation and Patch Management
Detect and fix configuration problems and security vulnerabilities automatically across multiple systems
Server Provisioning and Application Stack Deployment
Provision Linux, Windows and ESX images and optimized JeOS-based application stacks
Multiplatform Support
Support physical & virtual, Windows desktops and servers, UNIX and Linux servers, and vSphere
Automation: vCM will help you increase the number of systems under management. It will also let you control cost and increase availability of trained systems administrators. Being able to understand and prioritize who needs to do what, leaving mundane tasks to less skilled admins, will help you and your organization deliver against set targets. vCM automatically tracks more than 80,000 configuration variables and detects changes to these values.
Regulatory Compliance / Best Practices: vCM compares changes to policies to determine a violation, providing deep compliance capabilities. With vCM users can enable best practices and track adherence to corporate, industry and regulatory best practices and mandates . Customers have access to a wide variety of compliance related content to meet both general purposes and industry specific needs such as:
Regulatory and industry: SOX, PCI, HIPPA Basel II, NERC/FERC, DISA/NIST
Security and Pest Practices : CIS , Vendor specific e.g. Microsoft and VMware hardening guides
Detect violations and remediate: vCM tracks more than 80,000 configuration variables and when change is needed, as it always is, vCM enables you to effectuate this by a “Right Click Fix”, which can be either immediate or scheduled, for a single system, machine group or for the complete data center. Furthermore, for every change completed (through vCM), vCM will keep an audit trail as well as the capability to roll back any unwanted or unapproved changes.
Provisioning and Deployment
vCM’s application stack management capabilities allow users to:
Build, optimize, manage & deploy server software in physical, virtual & cloud infrastructures
OS-level application dependencies identified automatically
‘Just enough operating system’ (JeOS) calculated in seconds
Bare metal provisioning
Application updates and deployments

21. vCenter Product Family
The vCenter Product Family focuses on 2 layers: infrastructure & operations and application management.
Today we will be focusing on vCenter Application Discovery Manager

22. vCenter Application Discovery Manager Overview
Application Discovery Manager capabilities can be summarized in four categories:
Passive discovery of your application infrastructure
Active high-definition discovery of hardware and software configuration details
Discovery analytics to visualize, analyze, and report on the collected data
The hybrid discovery methodology of ADM intelligently combines 3 forms of discovery: passive network observations, active remote queries, and discovery analytics to result in discovery that is far less intrusive than competitive solutions. This discovery is completely agentless, so no additional software components need be distributed.
Additional key points:
(on left) ADM can collect from thousands of servers across a widely, geographically dispersed set of data centers
(on bottom) ADM collect configuration, dependency, and change data that can be integrated into other 3rd party systems, CMDB, and vCenter Configuration Manager
(on right) the ADM GUI presents dashboard summaries and the killer-app: detailed application dependency maps

23. Passively Discover Application Dependencies with vCenter ADM
Title
Month Year
Passively Discover Application Dependencies with vCenter ADM
Title
Month Year
ESX to VC Dependencies
Remember to plan
to protect all three of these!
Virtualized On Relationship
ESX server
With ADM’s ability to discover tiered applications you can gain confidence in your ability to see all layers of a distributed application, continuously monitor them for configuration compliance with best practices, and ensure a smooth restart after a migration or site fail-over. ADM discovers many different types of dependencies – including dependencies between applications residing on the same or different ESX Servers. It can even discover dependencies between VMs that are managed by different vCenter Servers.
ADM discovers VMs, ESX servers, dependencies, configuration details
Relate individual parts of a VM infrastructure to the different application services / components
VMs defined on each ESX including detailed configuration for each VM
Display in maps
Dependency between the virtual environment and the virtualized environment
Dependencies (ESX -> Virtual Center, VM -> ESX, VM -> VM)
VMs, ESX servers, Virtual Center, configuration files
Detect relationships between VMs on the same physical server
There could be a database server and app server and a web server all on the same physical server
Listening to internal ESX traffic via a virtual collector
vCollector deployed as a VM on ESX servers, using the customers VI infrastructure
VMs
Virtual to Virtual Dependencies
Discover instances of DBs, Application servers, etc
Physical to Virtual Dependencies
Discover hidden dependencies, prepare for moves, build DR protection groups 23

24. vNews