Kaspersky Enterprise Cybersecurity

Kaspersky Security for Virtualization
Integrated with VMware NSX platform
Data is your business’s most important asset. So how and where that data is stored, processed
and transmitted is critical not just to achieving a greater competitive advantage, but also to increasing
operational efficiency and maintaining business continuity. There are many superior dataprocessing, storage and networking solutions out there. But networking solutions in particular
can be complex, inflexible and all too often tied to, and limited by, the hardware platform they’rebuilt on. This in turn impedes your data center’s agility, and your ability to satisfy rapidly changing
business requirements.
Traditional security solutions do not meetyour private cloud needs•••••Not elastic enough for your clouds
Cannot inter-operate via native API
Lack in providing full visibility on IT
Cause ‘update and scanning storms’
Eat your private cloud resources

How You Benefit From Natively Integrated
Agentless Security for VMware NSX:
• Fully automated deployment of SVM,
a specialized security appliance, basedon the security polices applied to eachprotected VM on the hypervisor host.
• Integration with NSX Security Policies
allows each protected VM to receive
precise, granular security capabilities to
let you scale corporate software-defined
data center with no borders.
• Integration with NSX Security Tags
allows your software-defined data centerdetect and react to most advanced threats
in real-time fashion, and even reconfigure
the entire infrastructure if necessary.
• Full infrastructure scanning protects all
VMs, whether they are on- or offline, foreven better cybersecurity coverage rightacross your entire virtual infrastructure.
• Proactive defense against cyberthreats
through use of the cloud-based
Kaspersky Security Network.

VMware® and Kaspersky Lab together address these issues through a joint
solution built around a highly efficient Software-Defined Data Center, armed withadvanced security capabilities to ensure high-level protection from internal orexternal threats, allowing you to work with different pools of network resources,
dynamically creating or reconfiguring your entire network topology in a matterof seconds, using a “zero trust” security approach.
Kaspersky Security for Virtualization Agentless has been specifically designedto protect private clouds built on VMware NSX for vSphere. This joint solutiondelivers advanced security capabilities to each VM within your private cloudwith near-zero impact on systems efficiency.

Built-in VMware NSX Services
Distributed Firewall

Virtual networks (VXLAN)

Server Activity Monitoring

VPN (IPSec, SSL L2VPN)

Kaspersky Security for Virtualization
Agentless Anti-malware

Virtual Network IDS/IPS

Server Activity Monitoring

Security Policies integration

Security Tags integration

Scans even powered-off VMs

Native interaction between your virtualization platform and its security solutionmeans your private cloud can react in real time to any security incident acrossyour entire infrastructure. Unified orchestration console lets your teams centrally
manage the security of all your VMs, together with the Kaspersky Lab security
products running on your physical servers, endpoints and even mobile devices,
so it becomes easier for your team to manage entire hybrid cloud environment,with less pressure on IT resources, and less scope for human error.
A perfectly balanced combination, so you can implement, orchestrate and scale
security regardless of the size and complexity of your private cloud.

Preserves the private cloud ROI
Because Kaspersky Security for
Virtualization has been specificallydeveloped to protect virtual machines(VMs), it helps businesses maintain a highmachine density and high perfomance –preserving your virtualization ROI whileeliminating update and scanning ‘storms’,
together with Windows of Vulnerability or‘instant-on’ gaps.
Designed For Any Virtualizations
Kaspersky Security for Virtualization ismore than just ‘designed for’ virtualization
platforms: it utilizes the core technologiesof those platforms to optimize the security
capabilities of both platform and securitysolution.

Specifically Designed for VMware NSX Security• Interoperability with VMware NSX lets infrastructure and security layers work
together in close co-operation, bringing new levels of automation and protection.
• Automated deployment for VMware NSX allows the SVM (Security VirtualMachine) to ‘pop up’ automatically on the hypervisor, based on therequirements of the protected VMs sitting on that host.
• Security Policy integration means each VM receives precise security capabilities,
as defined by your corporate policies based on the VM’s individual role.
• Integration with NSX Security Tags allows your private cloud to react in real-time tosecurity incidents, automatically reconfiguring the entire infrastructure if necessary.
Security Virtual Machine (SVM)

Network Attack Blocker (NAB)• Natively integrates with VMware• Supports NSX and vShield Endpoint• No impact on platform performance• Anti-malware for Windows & Linux• Scans powered ON and OFF machines• Powerful protection for networks• Web-traffic control with URL scanning• Heuristic analyzer to protect applications• Instant protection for entire infrastructure

From now on, your infrastructure andits security solution work in harness for
maximum effectiveness.

VM

VM

VM

VM

NAB

Shields Entire Virtual Network
Kaspersky’s Network Attack Blocker
monitors network traffic for signs ofactivity typical of network attacks.
Kaspersky Security for Virtualization
Agentless provides this network-level
functionality together with support for
both VMware vCloud Networking andSecurity and VMware NSX platforms.
For Windows and Linux VMs
Kaspersky Security for Virtualization is truly
a perfectly engineered solution for hybrid
data centers that delivers advanced security
capabilities to any virtual server regardlessof the operating system running inside it.
We protect both Windows and Linuxservers, including RHEL 7GA, SLES 12 GA
and Ubuntu 14.04 LTS.

Automated Security and Monitoring• Full infrastructure scanning protects all VMs, whether they are on- or offline,
for even better security coverage right across your infrastructure.
• Routine scanning of all VMs can be pre-scheduled at a granular level,so security tasks can be orchestrated according to your needs.
• Self-protection and advanced SNMP-based monitoring guaranties that SVMs
are always up and running, and able provide extensive information to 3rd-party
monitoring tools for extra control.
• Advanced protection will be never interrupted, even if a workload is moved
through the cloud – VMware vMotion and Disaster Recovery’s own capabilities
are fully supported.

Superior Reliability and Manageability• A single unified management console for virtual, physical and mobile devices
means you can enforce consistent security policies across your entire IT estate.
• Deployment with no downtime – no need to reboot any VMs or put the hostserver into maintenance mode.
• Intelligent scan task orchestration and automation eliminates any peaks in
hypervisor resource consumption to preserve overall platform efficiency.
• Feature-rich reporting and monitoring makes it easier to manage andsupervise security throughout your organization.
The result is a powerful, elastic and fully secure private cloud environment.
Learn more at www.kaspersky.com/enterprise

ExpertAnalysis

HuMachine™

Kaspersky Lab
Enterprise Cybersecurity: www.kaspersky.com/enterprise
Cyber Threats News: www.securelist.com
IT Security News: business.kaspersky.com/#truecybersecurity#HuMachinewww.kaspersky.com
MachineLearningBig Data /Threat Intelligence© 2017 AO Kaspersky Lab. All rights reserved. Registered trademarks and service marks are the property of
their respective owners.