Overview Of Vshield; Vshield Components; Vshield Manager; Vshield Zones - VMware VSHIELD APP 1.0 Admin Manual

1

Overview of vShield

®
VMware vShield is a suite of security virtual appliances built for VMware vCenter™ Server and Vmware
ESX™ integration. vShield is a critical security component for protecting virtualized datacenters from attacks
and misuse helping you achieve your compliance‐mandated goals.
This guide assumes you have administrator access to the entire vShield system. The viewable resources in the
vShield Manager user interface can differ based on the assigned role and rights of a user, and licensing. If you
are unable to access a screen or perform a particular task, consult your vShield administrator.
This chapter includes the following topics:

"vShield Components" on page 13

"Migration of vShield Components" on page 15

"VMware Tools" on page 15

"Ports Required for vShield Communication" on page 15

vShield Components

vShield includes components and services essential for protecting virtual machines. vShield can be configured
through a web‐based user interface, a vSphere Client plug‐in, a command line interface (CLI), and REST API.
To run vShield, you need one vShield Manager virtual machine and at least one vShield App or vShield Edge
module.

vShield Manager

The vShield Manager is the centralized network management component of vShield and is installed from OVA
as a virtual machine by using the vSphere Client. Using the vShield Manager user interface, administrators
install, configure, and maintain vShield components. A vShield Manager can run on a different ESX host from
your vShield App and vShield Edge modules.
The vShield Manager leverages the VMware Infrastructure SDK to display a copy of the vSphere Client
inventory panel.
For more on the using the vShield Manager user interface, see Chapter 2, "vShield Manager User Interface
Basics," on page 17.

vShield Zones

vShield Zones, included with the vShield Manager, provides firewall protection for traffic between virtual
machines. For each Zones Firewall rule, you can specify the source IP, destination IP, source port, destination
port, and service.
VMware, Inc.
1
13