The coolest thing I’ve seen all week…

This is the coolest thing I’ve seen all week.   The RSA crew the VMware security team and the Nexus 1000v  folks have been working together for a while, and things are starting to come out that are REALLY REALLY cool.

This example shows the power of vSphere, VMsafe, vShield Zones, and the Nexus 1000v and RSA Data Loss Prevention mashed up together.  

Imagine being able to not only group VMs into zones and apply firewall type rules (IP address, VLAN, ports, etc), but also content rules (like PCI and PII standards – but literally almost any content) that were allowed to flow across those zone boundaries.   This allows you to say thinks like: “don't let any info with a credit card number or patient number or social security number leak out of here".

Well  - here it is, at the RSA conference:

At the end of the video, they literally intercept an email leaving the vShield Zone based on content against the content policy – no agents, no span port sniffing, just listening at the vSphere layer, coupled with the Nexus 1000v.   Is that worth an EE+ upgrade for you?

I previewed this idea (admittedly a kludgy prototype – but even that had the audience clapping!) – how an infrastructure based on virtualization could be MORE secure than a physical infrastructure – at VMworld Europe 2009 in the keynote (go back to Feb and take a look).

I love the fact that between Ionix and RSA EMC is now so much more than a storage company (though also the leader in the storage category!).  This example, among others show what we mean when we say “information infrastructure”.

So – what COOL stuff will I be launching (as in GA) or previewing (that will be 2010 deliverables) at the EMC keynote at the end of august at VMworld 2009???!   :-)

Comments

[NiTRo]

Hello Chad,
Ok it's cool but it only concern clear traffic. So if the mail is sent via https or any other encrypted channel the DLP shield wouldn't see anything. Except if the DLP act like a MITM thing ?

[latoga]

After spending time at a 'leak prevention' security start up years ago, this "mashup" shows interesting potential! Very cool...