VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API User Manual download pdf (Page 27)

VMware, Inc. 27

vShieldZonesprovidesfirewallprotectionaccesspolicyenforcement.Trafficdetailsincludesources,

destinations,directionofsessions,applications,andportsbeingused.Trafficdetailscanbeusedtocreate

firewallallowordenyrules.

Thischapterincludesthefollowingtopics:

 “UsingZonesFirewall”onpage 27

 “CreateaZonesFirewallRule”onpage 29

 “CreateaLayer2/Layer3ZonesFirewallRule”onpage 30

 “ValidatingActiveSessionsagainsttheCurrentZonesFirewallRules”onpage 31

 “ReverttoaPreviousZonesFirewallConfiguration”onpage 31

 “DeleteaZonesFirewallRule”onpage 32

Using Zones Firewall

ZonesFirewallisacentralized,hierarchicalfirewallforESXhosts.ZonesFirewallenablesyoutocreaterules

thatallowordenyaccesstoandfromyourvirtualmachines.EachinstalledvShieldZonesenforcestheApp

Zonesrules.

YoucanmanageZonesFirew allrulesatthedatacenter,cluster,andportgrouplevels

toprovideaconsistent

setofrulesacrossmultiplevShieldZonesinstancesunderthesecontainers.Asmembershipinthesecontainers

canchangedynamically,ZonesFirewallmaintainsthestateofexistingsessionswithoutrequiring

reconfigurationoffirewallrules.Inthisway,ZonesFirewalleffectivelyhasacontinuousfootprintoneachESX

host

underthemanagedcontainers.

WhencreatingZonesFirewallrules,youcreate5‐tuplefirewallrulesbasedonspecificsourceanddestinationIP

addresses.

Zones Firewall Management

NOTEYoucanupgradevShieldZonestovShieldAppbyobtainingavShieldApplicense.vShieldApp

enhancesvShieldZonesprotectionbyofferingFlowMonitoring,customcontainercreation(SecurityGroups),

andcontainer‐basedaccesspolicycreationandenforcement.

YoudonothavetouninstallvShieldZonestoinstallvShieldApp.All

vShieldZonesinstancesbecomevShield

Appinstances,theZonesFirewallbecomesAppFirewall,andtheadditionalvShieldAppfeaturesareenabled.

1 2 ... 22 23 24 25 26 27 28 29 30 31 32 ... 161 162

No comments

VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API User Manual Page 27