VMware VSHIELD APP 1.0 Admin Manual page 5

vShield App and vShield Endpoint
11
vShield App Management 63
Send vShield App System Events to a Syslog Server 63
Back Up the Running CLI Configuration of a vShield App 64
View the Current System Status of a vShield App 64
Force a vShield App to Synchronize with the vShield Manager 64
Restart a vShield App 65
View Traffic Statistics by vShield App Interface 65
Download the Firewall Logs of a vShield App 65
12
Flow Monitoring 67
Using Flow Monitoring 67
View a Specific Application in the Flow Monitoring Charts 68
Change the Date Range of the Flow Monitoring Charts 68
View the Flow Monitoring Report 68
Add an App Firewall Rule from the Flow Monitoring Report 69
Delete All Recorded Flows 70
Editing Port Mappings 70
Add an Application-Port Pair Mapping 70
Delete an Application-Port Pair Mapping 71
Hide the Port Mappings Table 71
13
App Firewall Management 73
Using App Firewall 73
Securing Containers and Designing Security Groups 73
Default Rules 74
Layer 4 Rules and Layer 2/Layer 3 Rules 74
Hierarchy of App Firewall Rules 74
Planning App Firewall Rule Enforcement 74
Create an App Firewall Rule 75
Create a Layer 2/Layer 3 App Firewall Rule 77
Creating and Protecting Security Groups 77
Add a Security Group 77
Assign Resources to a Security Group 78
Validating Active Sessions against the Current App Firewall Rules 78
Revert to a Previous App Firewall Configuration 79
Delete an App Firewall Rule 79
14
vShield Endpoint Events and Alarms 81
View vShield Endpoint Status 81
Alarms 82
Host Alarms 82
SVM Alarms 82
VM Alarms 83
Events 83
Audit Messages 86
VMware, Inc. 5