LOAD 2014-Prezentare BitDefender

127-Oct-14

Copyright @ Bitdefender 2014

Page 1

27 October 2014 | Copyright @ Bitdefender 2014

GravityZone EnterpriseHigh Availability and scalability for your

datacenter security

Andrei IONESCU| Professional Services Engineer

227-Oct-14


Page 2

1. Introduction

2. Architecture

3. High Availability GravityZone Architecture

4. Easy Management with Control Center

5. Security for Virtualized Environments

6. Agentless protection with VMware vSphere

7. Traditional Agent vs. Agentless

8. Hypervisor-agnostic security for complex datacenters

9. Security for Endpoints

10. Security for Mobile Devices

11. Case study – Customer 1



14. Q&A

Agenda

327-Oct-14


Page 3

Introduction

Bitdefender GravityZone addresses the needs of the most demandingenterprises by providing cross-platform security for physical desktops andservers, virtualized endpoints and mobile devices.

427-Oct-14


Page 4

Architecture

527-Oct-14


Page 5

GravityZone All-in-One Architecture

627-Oct-14


Page 6

High Availability GravityZone Architecture

727-Oct-14


Page 7

Easy Management with Control Center

Web based console that allows administrators to manage the security for physical, virtualized, and mobile environments.

Microsoft Active Directory integration

Multiple VMware vCenter integration

Multiple XenServer integration

827-Oct-14


Page 8

Security for Virtualized EnvironmentsProvides security that is build specifically for the virtualized environments allowing organizations to maintain higher consolidation ratios across their datacenters.

Compatible with VMware ESXi, Citrix Xen, Microsoft Hyper-V, Red Hat KVM, Oracle VM

Integrates with vShield Endpoint 5 for agentless antimalware

Supports Windows and Linux VMs

927-Oct-14


Page 9

Traditional Agent vs. Agentless

1027-Oct-14


Page 10

Agentless protection with VMware vSphere

Tightly integrated with VMware vShield Endpoint EPSEC API

VMware vCenter integrated management for unified visibility

Bitdefender Tools

• Extends coverage to non-Windows environments.

• Provides deep introspection capabilities: file systems, processes and memory

1127-Oct-14


Page 11

Hypervisor-agnostic security for complex

datacenters

Protects virtualized desktops and servers running on: Windows & Linux

Pre-trained, self-learning cache mechanisms

Centralized antimalware for improved performance

Universal platform coverage - full support for any hypervisor:VMware, Citrix, Microsoft, Red Hat, KVM, Oracle, or any other virtualization.

Security Server redundancy

1227-Oct-14


Page 12

Security for Endpoints

Protects any number of Windows/MacOS laptops, desktops and servers. To protect your physical computers with Security for Endpoints, you must install Endpoint Security (the client software) on each of them.

Includes the following modules:

Antimalware

Firewall

Content Control

(web access, application control)

1327-Oct-14


Page 13

Security for Mobile Devices

Unifies enterprise-wide security with management and compliance control of iPhone, iPad and Android devices by providing simple software and update distribution via Apple or Android marketplaces.

Security features include:

screen lock

authentication control

device location

remote wipe

detection of rooted or jailbroken devices

security profiles.

On Android devices the security level is enhanced with real-time scanning and removable media encryption.

1427-Oct-14


Page 14

Case study – Customer 1

Customer 1 is a leading distribution services and e-commerce provider for the global travel industry.

GravityZone is used by Customer 1 to protect all physical endpoints organization-wide and all running VMs running in all 2 datacenters world-wide.

Datacenters vCenter Servers Number of

Clusters

Number of VMs Number of

physical machines

Location A 2 59 5463 5470

Location B 1 4

1527-Oct-14


Page 15


1627-Oct-14


Page 16


GravityZone Virtual Appliance vCPUs RAM Memory Storage

GravityZone VA-1 (Database, Update, Web Console,

Communication)

8 12 GB 80 GB

GravityZone VA-2 (Web Console, Communication) 8 8 GB 80 GB

GravityZone VA-3 (Load Balancer) 2 2 GB 80 GB

vCenter Servers Clusters Number # VMs Security Servers

Total 3 63 Clusters 5463 VMs 32 SS

1727-Oct-14


Page 17


Customer 2 is a bank from US operating over 260 branches.

GravityZone is used by Customer 2 to protect all physical endpoints organization-wide and all running VMs running in all 2 datacenters.

Datacenters vCenter Servers Number of Hosts Number of VMs Number of physical

machines/ATM

Location A 1 64 1641 1700

Location B 1 30

1827-Oct-14


Page 18


1927-Oct-14


Page 19


vCenter Servers Cluster Number # VMs Security Servers

Total 2 13 Clusters 1641 VMs 24 SS

Server Role Managed Endpoints vCPUs RAM Memory Storage

Web Console <5,000 2 2 GB 40 GB

Communication Server <5,000 2 2 GB 10 GB

Database Server <5,000 2 4 GB 40 GB

Update Server <5,000 1 1 GB 10 GB

2027-Oct-14


Page 20


Customer 3 is a leader in secure cloud hosting.

GravityZone is used by Customer 3 to protect all the VMware cloud infrastructure in all 5 datacenters (70% Linux based and 30% Windows based virtual machines).

2127-Oct-14


Page 21


2227-Oct-14


Page 22


vCenter Servers Hosts Number # VMs Security Servers

Total 20 450 Hosts ~20000 VMs 114 SS

Server Role Managed Endpoints vCPUs RAM Memory Storage

Web Console <20,000 6 6 GB 80 GB

Communication Server <20,000 6 6 GB 80 GB

Database Server <20,000 3 8 GB 80 GB

Update Server <20,000 1 2 GB 80 GB

2327-Oct-14


Page 23

Copyright @ Bitdefender 2014www.bitdefender.com/enterprise

Twitter: @virt_secLinkedIn: www.linkedin.com/bitdefenderenterprise

Thank you!

Q&A

Documents

LOAD 2014-Prezentare BitDefender