Simon Hamilton-Wilkes, Author at Network Virtualization

Enhancing Application Performance with NSX

Simon Hamilton-Wilkes posted March 15, 2018

The application performance gains resulting from migrating an infrastructure hosting multi-tier applications from a physical networking implementation to a NSX software-based one have been well documented. Bob Goldsand and Todd Muirhead, from our performance engineering team have been preaching this gospel for some time, for example at VMworld 2017. Read more...

Enhancing NSX with Check Point vSEC

Simon Hamilton-Wilkes posted January 10, 2018

While VMware NSX enables micro-segmentation of the Software Defined Data Center, it mostly polices traffic in layers 3 and 4, with only limited application level (layer 7) support. Sometimes additional layers of protection are needed for use cases such as Secure DMZ or meeting regulatory compliance requirements like PCI, in which case partner solutions can Read more...

Fortinet FortiGate-VMX and NSX use cases

Simon Hamilton-Wilkes posted January 3, 2018

NSX is an extensible platform; other vendors security solutions can be added to it by means of the Northbound REST API, and two private APIs: NETX for network introspection, and EPSEC for guest introspection. Fortinet’s FortiGate-VMX solution uses the NSX NETX API to provide advanced layer 4-7 services via service insertion, also called service chaining. This enables Read more...

VMware NSX and Check Point vSEC

Simon Hamilton-Wilkes posted June 9, 2017

One of the current challenges of data center security is the East-West traffic that has become so pervasive as modern applications communicate a great deal between their different components. Conventional perimeter security is poorly placed to secure these lateral flows, to promote a zero-trust model in order to prevent threats moving within each application layer. Read more...

vRealize Network Insight, NSX and Palo Alto Networks for micro-segmentation

Simon Hamilton-Wilkes posted April 28, 2017

Data Center cyber security is a fast-moving target where the IT teams need to constantly stay ahead of those that wish to do evil things. As security attacks can come from all directions, externally, and internally as well, the IT teams must fortify all the data, with a zero-trust security approach. Perimeter security augmented Read more...