112711 control your physical and virtual it infrastructure with vmware vcenter configuration manager...

8/3/2019 112711 Control Your Physical and Virtual It Infrastructure With Vmware Vcenter Configuration Manager 272746

http://slidepdf.com/reader/full/112711-control-your-physical-and-virtual-it-infrastructure-with-vmware-vcenter 1/30

Control Your Physical and VirtualIT Infrastructure with VMware vCenter

Configuration ManagerGeorge Gerchow, Chief Cloud Executive ITIL, CISSP, CCNA, MCPS, SCP, VMware



• Cloud Computing and Virtualization Ride

• VMware Solutions for Private Cloud (ITaaS)

Key Business Drivers

• What is VMware vCenter Configuration Manager

Change Management and Compliance Simulated Demo

Integrations

• Competitive Differentiators

Agenda



•

•

•

•

Private CloudInfrastructureRenters (IaaS)

Public/Private/HybridCloud

Management and Security

IT Management is Changing in the Cloud Era



Security and Compliance Market Overview

Market

Size in 2012

Endpoint Security

Antivirus

Market Growth Rate

M a r k e t S i z e (

$ M ) i n 2 0 0 9

$30B Worldwide in 2009

Anti-Virus

$4,096 (7%)

Application

Security

$2,987 (15%)

SecurityOperations

Identity Mgmt

$3,565(20%)

Network Security

$9,136 (8%)

Data Security

$3,258 (19%)Endpoint Security

$3,001

(2%)

$713

(8%)

Source: FORRESTER, 2009

NetworkSecurity

IdentityManagement

Others

Change Mgmt

$3,001

(8%)

Change &Compliance

Segments We Address

U.S. companies will spend $29.8B on GRCactivities in 2010, up 3.9%



vCenter Configuration Manager:Manage change, scale yourinfrastructure without addingstaff, ensure compliance

Avoid configuration drift &maintain compliance

Application Discovery Manager:Simple application dependencyviews, agentless & non-intrusive

Get a fast & accuratedatacenter view

Deliver self-servicewith control

Service Manager: FederatedCMDB, automated processes &workflow, self-service portal

Turn IT performance datainto actionable information

Integrien: Real-time performanceanalytics solution analyzes andcorrelates data across the

monitored IT infrastructure

Optimize capacity for virtualinfrastructure

VMware CapacityIQ: Eliminatewaste by identifying any unusedor over-allocated capacity

Next Gen IT Management – VMware



Compliance andRemediation to

Lower Risk

Manage and Control

Virtualization

Change Management

to Mitigate Outages

Harden Environmentto Reduce Threats

and Breaches

Provisioning &Patching inline with

Compliance toEliminate

Vulnerabilities

“Operational Efficiency & Tool Consolidation”

VCM Business Benefits – Summary



ANALYZE

COMPLIANCE

ANALYTICS

PLAN

REMEDIATE

DISCOVERY

& CHANGE

VERIFY

UNIX LINUXWINDOWS

Discover hundreds of Physical, Virtual, OS and

Application parameters to build a repository and of

Configuration Information for thousands of OS

instances and progressively track point in time

configuration change, including file integritymonitoring`.

Quickly analyze on every instance against known

patches and compliance factors to understand your

risk position.

Enterprise System Reporting on the optimization and

security posture of all systems within the enterprise.

Asset classification allows the analysis and reporting

to quickly understand where the most value can be

achieved in the shortest amount of t ime – Decision

Support.

VCM has the ability to “Right-Click Fix” or auto

remediate non-compliance or mis-configurations.

Verify the remediation and optimization schedulesare producing positive outcomes for the

organization.

Lastly, leveraging Key Performance Indicators and

Balanced Business Scorecards, Data Warehousing

and Business Intelligence solutions are used to

analyze historical results, with present conditions, to

positively affect people, process and technology.

REPORT

vCenter Configuration Manager (VCM) Solution Overview

http://www.debian.org/

http://www.redhat.com/



Understanding Progressive Change

Type: Planned, Controlled

• Updates and fixes

• Infrastructure changes

• Component patches

Standard

Build

New

Build

Actual

Build

Type: Unplanned, Uncontrolled• User Changes

• Unapproved Admin Change

• Exploits

• Shadow IT

Origin: End Users,Developers, Suppliers

80,000CIs



VMware Approach to Security and Compliance

Policies built from out-of-the-box compliance templates

• Harden the hypervisor configsfor ESX, network, storage, etc.

• Harden the hypervisor guest

VM settings• Harden the Guest OS

Physical and Virtual

Desktop and Servers

Win, UNIX, Mac

Build Gold Standards

Harden and secure the components

Virtual Datacenter 1 Virtual Datacenter 2

SOX & HIPAA DISA & PCI CIS & PCI

CIS & PCI

ESX Hardening

Cluster ACluster B

VMware vSphere + vCenter

Physical Datacenter

Virtualization Hardening Guidelines

CIS Benchmarks

FISMAHIPAASOX

NERC/FERC

PCI DSSNIST

ISO 27002GLBADISA



Save Time with Automated Patching and Provisioning

Software Provisioning (Windows)

• Create software packages

• Push packages to systems & guests

• Tied to compliance

• Push software to systems out of compliance(e.g. Anti-virus)

Patching to Mitigate Vulnerabilities

• Pull down patch bulletins for the OS vendors

• Assess the infrastructure for vulnerabilities

• Remediate - Push patches out to the guestsand systems that need them

Provision Standard Images(vSphere, Windows and Linux)

• Install ESX to Bare Metal

• Install OS in a VM Container in ESX/ESXi

• Install OS to Bare Metal

Common provisioning platform for both physical and virtual environments

Provision SW

Patch

Provision OS



vCenter Configuration Manager Architecture

UNIX

AIX 4.3.3, 5.1, 5.2, 5.3, 6.1

HP-UX 11i V 1.0, 2.0 3.0

Solaris 2.6, 8, 9, 10

Linux

Red Hat Enterprise Linux Server 2.1, 3, 4, 5. Red Hat Enterprise Linux Workstation 3, 4, 5

SUSE Linux Enterprise Server 9, 10, 10.2, 10.3 11.0, 11.1

Virtual Support• ESX 2.5, 3.0, 3.5

• VMware ESXi 3.5

• VMware vSphere 4.0u1, 4.0u2, 4.1• VMware vCenter 4

VMware Virtual Guests(Windows, UNIX, & Linux)

Physical

64-Bit Processor Support• For Windows: Xeon64, Itanium, and

AMD64

• For Linux: Xeon64 and AMD64

• For UNIX: Sun Sparcv9, Itanium(HP-UX), Intel64 and AMD64

64-Bit Windows Support• 2003,2008, 2008 R2

• XP Professional

• Vista: Business, Ultimate,Enterprise

• Windows 7 Business, Ultimate,Enterprise

WAN

ManagedCode

ManagedCode(vCM Remote)

ManagedCode

vCM Architecture and Coverage

Microsoft Windows

2000, 2003, 2003 R2, 2008, 2008 R2, XP Professional X86, Vista Business,Ultimate & Enterprise, Windows 7

DCOM/HTTPDCOM/HTTP

HTTP Collector

vCM DBS

WebInterfaceAdmin Client

HTTP

DMZ

Mac OS X

10.4, 10.5 (PPC and Intel)



Demonstration



Analyze overallcompliance

trends across

the enterprise

Understand Compliance Directly Inside vCenter

VCM tab invCenter gives

you easy accessto compliance

summary data

Drill into specificcompliance and

configurationdetails for host Identify specific

complianceviolations at a

glance

Guest systemconfiguration

and patch

details



Manage Patching Across the Enterprise with VCM

Monitor and planpatching from asingle location

Report on patch-levelstatus across the

enterprise (Unix, Linux,

Windows)

Select systems

and patches todeploy

Centrally controlpatchingprocess



Compliance Analysis and Remediation with VCM

View availablecompliancetemplates

Report onoverall

complianceposture

Triage vitalissues to

address forcritical systems

Select PCIcompliance

analysis results

Pinpoint whatsystems failedwhat checks

Fix complianceviolations



Integrations



Need an RFC before making a Change- Emergency Change Capability

Auto Creating an RFC then having it go through the CMprocess

Verifying the Change was, or was not executed

Change Reconciliation Capturing out of Band Change

Improving and measuring the process

CMDB CI updates Service Catalogue

Security & Compliance

Integrating into VMware Service Manager



The Reboot



Selected all Machines Out of Band!



Trail of Guilt….



Turn on Service Desk Integration



Pebcak, Let’s Get the Party Started



Typical Pebkac Scenerio

ID10T calls Service Desk, cannot access Server

Reporting is not enough, roll that sucka back



Un-Planned Change Real World Example

7:30am Exchange Server “Blue Screen of Death”

• Called by Exec VP of Operations

Mission Critical Application

• No CM record found within Service Desk

What happened?

Recovery Plan Established at 8:30am• Rebuild OS, load app and back up files from tape

• ETA 6+ hours



Un-Planned Change Real World Example – Continued

What about the Technical Controls Change Log? (8:35am)

• Found a new network driver was installed

• Safe Mode login, uninstalled drive

• Exchange Server restored in 5 minutes

Provided Factual Report to Senior Management

• Established credibility, saved time & $$$$$



Visibility & Accountability



Security and the Impact of Change



Dependencies of Change



Virtualization & Cloud Management – Competitive Differentiators

• Compliance Content, Automation

• Virtualization Enablement

• Closed Loop Change Management

• Agentless Discovery of Application Dependencies

• ITSM Process, CMDB, Service Catalog

• Product Integrations



Thank You

This webcast has been recorded and a link to the on-demand versionwill be sent to you in a follow-up e-mail along with a PDF copy of the slides.

For more webcast information, please visit www.vmware.com/go/webcastsFollow us on Twitter at www.twitter.com/vmwareevents

112711 control your physical and virtual it infrastructure with vmware vcenter configuration manager...

Documents