Micro‐segmentation For Dummies [VMware edition]

Title Page......Page 3
Copyright Page......Page 4
Table of Contents......Page 5
Introduction......Page 7
Icons Used in This Book......Page 8
Where to Go from Here......Page 9
Data Breaches Continue to Occur......Page 11
The Life Cycle of a Data Center Attack......Page 12
Throwing Stones at the (Data Center) Perimeter Walls......Page 15
Limiting Lateral Movement within the Data Center......Page 21
Visibility and context......Page 23
Isolation......Page 25
Segmentation......Page 26
Automation......Page 27
Persistence......Page 29
Extensibility......Page 30
Balancing Context and Isolation......Page 31
Implementing Least Privilege and Unit‐Level Trust with Micro‐segmentation......Page 32
What Micro‐segmentation Is Not......Page 33
Key Forces Driving the Need for Data Center Transformation......Page 37
Transforming Your Data Center with Network Virtualization......Page 40
How Network Virtualization Works......Page 41
Essential Elements for Network Virtualization......Page 45
Just planes — no trains or automobiles......Page 46
Encapsulation......Page 47
Chapter 4 Automating Security Workflows......Page 51
Network‐based policies......Page 52
Infrastructure‐based policies......Page 53
Provisioning......Page 54
Responding to Threats......Page 55
Firewalling Tens of Thousands of Workloads with a Single Logical Firewall......Page 56
Achieving Micro‐segmentation......Page 59
Identify patterns and relationships......Page 61
Create and apply the policy model......Page 62
Security Use Cases......Page 63
DMZ anywhere......Page 64
Secure user environments......Page 65
Minimize Risk and Impact of Data Center Security Breaches......Page 67
Simplify Network Traffic Flows......Page 68
Enable Advanced Security Service Insertion, Chaining, and Traffic Steering......Page 69
Leverage Existing Infrastructure......Page 70
Reduce Capital Expenditures......Page 71
Lower Operating Expenses......Page 72
Securely Enable Business Agility......Page 73
EULA......Page 76