Introduction To Vshield; Vshield Components At A Glance; Vshield Manager; Vshield Zones - VMware VSHIELD APP 1.0.0 UPDATE 1 Quick Start Manual

1

Introduction to vShield

This chapter introduces the VMware
The chapter includes the following topics:


"vShield Components at a Glance"


"Deployment Scenarios"
vShield Components at a Glance
VMware vShield is a suite of security virtual appliances built for VMware vCenter™ Server integration.
vShield is a critical security component for protecting virtualized datacenters from attacks and misuse helping
you achieve your compliance-mandated goals.
vShield includes virtual appliances and services essential for protecting virtual machines. vShield can be
configured through a web-based user interface, a vSphere Client plug-in, a command line interface (CLI), and
REST API.
vCenter Server includes vShield Manager and vShield Zones. The following vShield packages each require a
license:

vShield Edge with Port Group Isolation

vShield App

vShield Endpoint
One vShield Manager manages multiple vShield Zones, vShield Edge, vShield App, and vShield Endpoint
instances.

vShield Manager

The vShield Manager is the centralized network management component of vShield, and is installed as a
virtual appliance on any ESX™ host in your vCenter Server environment. A vShield Manager can run on a
different ESX host from your vShield agents.
Using the vShield Manager user interface or vSphere Client plug-in, administrators install, configure, and
maintain vShield components. The vShield Manager user interface leverages the VMware Infrastructure SDK
to display a copy of the vSphere Client inventory panel, and includes the Hosts & Clusters and Networks
views.

vShield Zones

vShield Zones provides firewall protection for traffic between virtual machines. For each Zones Firewall rule,
you can specify the source IP, destination IP, source port, destination port, and service.
VMware, Inc.
®
vShield™ components you install.
on page 7
on page 10
1
7