VMware introduces a complete SDN and Security stack

At VMworld 2019, VMware has announced a broad set of networking and security innovations and major milestones that further advance VMware’s vision of the Virtual Cloud Network.

Today’s announcement includes the introduction of VMware NSX Advanced Load Balancer; new and enhanced network and security analytics capabilities,delivered through VMware vRealize Network Insight 5.0 and NSX Intelligence; and continued advancements of VMware SD-WAN by VeloCloud, the industry’s only hyperscale cloud networking solution.Collectively, these solutions enable VMware to deliver the public cloud experience – a fully automated deployment of a data center workload – across any infrastructure,spanning from edge to private data centers,to public clouds. This agility can only be achieved through the automation of all network services, which requires having all switching, routing, security and load balancing services defined in software, centrally managed, and running on distributed, general purpose servers.

Tom Gillis, senior vice president and general manager, networking and security business unit, Vmware, says, “VMware brings the one-click public cloud experience to the entire enterprise through an automated, software-defined network architecture. VMware is a leader in next-generation software-defined networking and security, delivering consistent, pervasive connectivity and intrinsic security to apps, data and users wherever they reside.We extend this virtual infrastructure across public and private clouds, all the way to the network edge, and our advanced analytics capabilities provide the visibility and troubleshooting needed to make the Virtual Cloud Network easy to operate.”

The new VMware NSX Advanced Load Balancer (previously Avi Networks Platform) is a distributed application delivery controller (ADC) built for the cloud, with an architecture that mirrors cloud principles. NSX Advanced Load Balancer helps organizations overcome the complexity and rigidness of legacy systems and ADC appliances with modern, software-defined application delivery services. NSX Advanced Load Balancer provides a software load balancer and intelligent web application firewall, combined with advanced analytics and monitoring to enable a fast, scalable, and intrinsically more secure application experience. The solution’s central control plane and distributed data plane deliver application services as a dynamic, multi-cloud fabric which intelligently automates decisions and provides unprecedented application analytics and on-demand elasticity. Customers can dispatch services, such as load balancing and web application firewall, to any application on any cloud, running on VMs, containers, or bare metal, using one centralized interface.

Today the company announced VMware is the only company that delivers hyperscale SD-WAN through a highly automated, stateless, scale-out design that is akin to the architecture of public clouds like AWS, Azure and Google Cloud. VMware achieves hyperscale SD-WAN by having thousands of gateways across every major cloud provider, and hundreds of underlay carrier networks around the world. These gateways are stateless, and horizontally scalable, meaning that new gateways launch with no disruption to the end user. For customers this means new branch offices and increased application traffic can be added dynamically and automatically without reconfiguration. Changes, if necessary, can be rolled out dynamically to gateways without disruption to the end user. Customers can have tens of thousands of edges on a single network. The cloud gateways provide the automated one-click on ramp to all the major public cloud providers, and to VMware Cloud Foundation running in private data centers. With VMware’s hyperscale SD-WAN solution customers achieve rapid speed of deployment, unprecedented economics, improved application performance, better network resiliency and simplified WAN operations.

VMware SD-WAN by VeloCloud is a leader in the fast-growing SD-WAN market, as measured by industry analysts. The solution has been chosen by thousands of customers spanning more than 150,000 branch office locations in more than 130 countries around the world. The service is available from a partner network that includes more than 500 partners globally, including system integrators, VARs, MSPs and more than 100 telecom service providers. VMware and Dell EMC are also announcing a co-branded SD-WAN service powered by VMware, which will be sold by approximately 20,000 sellers worldwide.

NSX Intelligence is a new distributed analytics engine built natively into NSX-T. Together, VMware vRealize Network Insight and NSX Intelligence deliver comprehensive visibility, analytics and troubleshooting to improve network and security operations for the Virtual Cloud Network. NSX Intelligence provides continuous datacenter-wide visibility for network and application security teams, helping them deliver a more granular and dynamic security posture, simplify compliance analysis, and streamline security operations. NSX Intelligence provides deep insight at the packet level into virtualized and containerized workloads, allowing for intuitive, highly automated network and security policy generation and enforcement. NSX Intelligence helps eliminate blind spots to reduce security risk, and accelerate security incident remediation through visualization and deep insight into every flow across the entire datacenter. Customers gain holistic context for security troubleshooting and improve collaboration between infrastructure and security teams through a converged pane for security operations.

The latest release of vRealize Network Insight provides end-to-end visibility and troubleshooting for physical and virtual infrastructure stretching from the data center to the network edge with new support for VMware SD-WAN, and into AWS, VMware Cloud on AWS and now Azure. VMware vRealize Network Insight 5.0 enhances NSX operations management by extending the PCI Compliance Dashboard for NSX-T, detecting audit changes for firewall rules, and tracking Virtual Tunnel Endpoint (VTEP) latencies.

VMware NSX-T is the industry’s only network and security platform, delivered completely in software that offers the full range of L2-L7 services for workloads running on all types of infrastructure – virtual machines, containers, physical servers and both private and public clouds. NSX-T 2.5 further strengthens the platform’s intrinsic security capabilities and delivers expanded scalability, cloud-native support, and operational simplicity. New enhancements include a Native Cloud Enforcement mode that allows customers to increase security of public cloud workloads using native cloud security controls; FIPS 140-2 compliance; the ability to apply Layer 7 application ID-based or context-aware rules to the NSX edge (gateway) firewall for north-south traffic; support for Layer 7 application ID-based distributed firewalling in KVM environments; VPN Enhancements for multi-tenancy; and packet mirroring for east-west traffic monitoring via Service Insertion.