Enterasys Announces Secure Networks for Virtual Data Centers

Market Wire, November, 2007

Enterasys Networks Inc. announced today the Enterasys® Secure Networks(TM) for Virtual Data Centers solution to assure the connectivity and compliance of virtualized computing and storage. As more organizations adopt virtualization technologies to reduce equipment, energy and cooling costs in data centers, Enterasys uniquely addresses the security, management and operations challenges these new data center technologies introduce. Authentication, authorization and audit requirements for security compliance remain essential to any new data center optimization initiatives. Enterprises worldwide want to ensure the reliability, quality of service, mobility, manageability, scalability and performance of data center information systems. Secure Networks for Virtual Data Centers delivers a way to sense and automatically respond to the dynamic mobility of virtual machines; enforce network access control policies; and comply with internal, industry or government regulations.

"Virtualization brings with it a unique set of security challenges as organizations integrate server, storage and networking priority and security policies to dramatically optimize agility, application performance and operating costs," said Mike Fabiaschi , President and CEO of Enterasys. "Enterasys Secure Networks can automatically sense and respond to data center infrastructure threats to ensure only the right users have access to the right information from the right place at the right time regardless of move/add/change activity."

"Security is often unknowingly weakened in the organizations' rush to virtualize," said Neil MacDonald, VP and Fellow with Gartner, Inc. "Virtualization, as with any emerging technology, will be the target of new security threats. Security must be 'baked in' from conception, not addressed later as an afterthought. Best practices that must be considered when deploying virtual machines include enforcing the principle of least privilege and leveraging intrusion prevention and network access control."

The key building blocks of the Enterasys Secure Virtual Data Center include:

--  Security-enabled infrastructure using Matrix® N-Series flow-based
    switches and Matrix® X-Series high performance routers, providing top-of-
    rack, end-of-row, and network core connectivity with capacity of more than
    1,000 Gigabit Ethernet or 256 Ten Gigabit Ethernet connections per rack.
--  Advanced Dragon® security applications for intrusion
    detection/prevention, network access control and security information
    management to automate compliance audits and reporting.
--  Centralized visibility and control through NetSight® management
    applications that enforce role-based policies and automate corrective
    actions.
    

Security is assured as only authorized users and protocols can connect to authenticated virtual machines and associated virtualized storage resources. As virtualization becomes the target of new security threats, multiple virtual services running on one physical device need to be protected within a given virtual machine as well as between them. The priority and security privileges of individual virtual machines must also be maintained as they migrate from one location/device to another to ensure business continuity or expand capacity on-demand. An Enterasys Matrix N-Series switch can discover, authenticate, and prioritize up to 1,000 virtual machines attached to a single Gigabit or 10 Gigabit Ethernet network interface. Enterasys Dragon software proactively prevents, intelligently senses and automatically responds to network security threats. Network behavioral analysis integrated with intrusion detection and prevention capabilities prevent the hosting or downloading of inappropriate or illegal content as well as the proliferation of worms or viruses. User-based and application-based Secure Networks policies save time and avoid costly errors when compared to traditional port-based and VLAN-based access control list (ACL) methods for network security and application provisioning. The end result is a self-defending data center which assures the confidentiality, integrity and availability of information.

Mobility of virtual machines and associated applications is critical to virtualization environments to ensure continuity of operations in the event of hardware failure or controlled shut-down of a server to conserve energy during low demand time periods. Enterasys Secure Networks uniquely adapt to dynamically provisioned and de-provisioned servers. Running server virtualization software on server farms connected to shared storage can also provide several advantages. By placing virtual machine virtual disks on storage area networks (SANs) accessible to all virtualized servers, virtual machines can easily migrate between servers as needed for load balancing or failover. Enterasys Matrix N-Series switches enable virtual machine mobility automatically without requiring manual reconfiguration of network interfaces on either the physical server or network device as policies dynamically adapt on-demand. Real-time location of a virtual machine and associated application services, as well as an audit history of its mobility, is available through Enterasys NetSight software.