What happens when the different parts of a vehicle become smarter than the vehicle itself? As we move toward the era of smart everything, hundreds of entities in a vehicle that communicate with each other, the vehicle and external systems create a need for identity orchestration so that all entities work as a conglomerate. Much like an orchestra without a conductor, without the ability to secure, control, and connect the link between a vehicle’s head unit, devices, and systems and to manage the lifecycle of people, systems and devices, transportation and fleet services are at risk of having connected, yet disparate systems.
Archivo mensual: octubre 2016
Will your virtual data traffic take the detour around your firewalls?
(c)iStock.com/wildpixel
We’re soon going to need a new descriptor going forward when we refer to the “data centre”. This rings true because network virtualisation across private and public environments means the locations of compute and storage resources to facilitate “on-demand” networking do not sit statically in what could be considered a typical data centre anymore. Virtual workloads now dart around like bees in a field of clover. It’s no longer a question of “if” but “when” all of this will affect your network.
Cisco estimates cloud platforms will process 86% of workloads by 2019, whileRightScale reports 95% of businesses use on average three public clouds and three private clouds. These dynamic pools of computing and storage resources are making traditional data centres like fax machines; you still likely have one, but hardly anyone uses it and what they are using it for is highly specialised.
Since the introduction of the first virtual machines, server admins have benefited from a more dynamic compute model that also helped lower costs associated with equipment, power, cooling and maintenance. Data centre administrators are now able to apply the concept of virtualisation to the network, which had become the bottleneck to dynamic, application-centric infrastructure. As a result, network admins and application developers are able to utilise the pools of compute, storage and now networking to rapidly provision new applications or expand existing ones on demand.
This changeover to virtual infrastructure has a profound effect on cybersecurity. In old-school data centres, the majority of data travelled north from servers to the firewall and south from the firewall to servers. However in virtual and software-defined networks, up to 80 percent of traffic travels east and west among virtualised applications and various network sectors. This traffic now goes virtually (pun intended) uninspected by the very security foundation that was deployed to protect it.
This trend could prove disastrous for businesses that utilise virtualised networks. If a threat were to get introduced into this new environment – and there are no shortages of techniques the bad guys are employing to infiltrate today’s data centre networks – the threat could then run unimpeded to spread and infect much of the infrastructure without anything to stop it.
Virtual workloads now dart around like bees in a field of clover – it’s no longer a question of ‘if’ but ‘when’ this will affect your network
What’s more, mobile apps, cloud apps and partner apps all connect services to users outside data centres through pathways not scanned by traditional security controls. All it takes is a single malware compromise on a minor web service and the entire network is at risk.
To keep virtual public and private clouds secure, a good rule of thumb is to segment your network and applications like we’ve done in our physical networks. This is called micro-segmentation in the software-defined world, which allows virtualised elements to be logically grouped together and establishes rules for how these groups can communicate with one another. This level of segmentation is also critical for getting control of cloud-based workflows traveling in new directions due to cloud platforms and domains.
However, micro-segmentation by itself is only part of the solution. To combat threats that get introduced into the virtual network, businesses also need advanced threat prevention security that works alongside micro-segmentation to actually inspect all traffic, keeping the bad stuff out and ensuring only what is desired gets through.
Advanced threat prevention security in virtualised environments, like any pooled networking resource, needs to be centrally orchestrated and provisioned so it can follow apps and workflows as they are created, grow and move. Also, the security should be intelligent enough to understand how all assets and elements are classified to ensure the proper security actions can be applied, regardless of where an asset is at any given time.
This requires a new security model that consolidates threat information across traditional gateway as well as within the virtualised space and provides consistent policy management, protections, logging and reporting wherever your data goes. By adopting these principles, organisations can start adapting the same level of protections safeguarding their physical networks now into their virtual networks.
When you figure out what to call the new networking, don’t forget to consider which directions your data travels and how to re-think your security strategy to keep data and resources protected.
VMworld EU – Live from Barcelona
Hello all,
There have been a lot of great announcements coming out of VMworld EU this week. Here are the exciting items that have been announced so far:
vSphere 6.5 vCenter Server Appliance (vCSA)
A lot of great changes have happened to the vCSA over the past few years. It can now run significantly more hosts/vms. There are less steps involved in spinning it up as opposed to the Windows version. And NOW (finally!) one of the last reasons for keeping the windows version around has been addressed: vUM! VCSA 6.5 now has Update Manager integrated. You can now upgrade from 5.5 or 6.0 (windows OR appliance) to 6.5, including vDS configuration. It has a brand new HTML5 web client, though it doesn’t yet have feature parity with the old version, that will be addressed.
VMware Cross-Cloud services
This is the thing that I’m the most excited about and the one that has me asking “What took you so long?”. Cross-cloud services will enable connectivity to public cloud providers for the “seamless integration of workloads”. It will enable you to (for example) run your DB on premises, your application tier in AWS, and your web front end in Azure. I asked some of the AWS guys here about the technical details but they haven’t been ironed out quite yet. This offering is slated to be available “Mid 2017” and will be purported to also have “Elastic DRS” – an ecosystem that allows you to burst across clouds. In the event of a workload spike, you would be able to provision more VMs locally via vRA and use Auto-Scale Groups to increase the number of EC2 instances in AWS to handle the increased demand. VMware also announced that NSX micro-segmentation would also function within the public cloud providers – this will give you additional security granularity on top of native firewalls, security groups and network access control lists.
More to come! In the meantime, register for our upcoming webinar. CTO Chris Ward will be doing a full deep-dive into all of the biggest VMworld announcements.
Chris Williams – GreenPages Enterprise Consultant
Apache #Hadoop and #BigData Standards | @CloudExpo #IoT #M2M #BI #ML
Ten short years ago, Apache Hadoop was just a small project deployed on a few machines at Yahoo and within a few years, it had truly become the backbone of Yahoo’s data infrastructure. Additionally, the current Apache Hadoop market is forecasted to surpass $16 billion by 2020.
This might lead you to believe that Apache Hadoop is currently the backbone of data infrastructures for all enterprises; however, widespread enterprise adoption has been shockingly low.
M2M IoT Communications | @CloudExpo #IoT #M2M #RTC #UCaaS #WebRTC
Fifty billion connected devices and still no winning protocols standards. HTTP, WebSockets, MQTT, and CoAP seem to be leading in the IoT protocol race at the moment but many more protocols are getting introduced on a regular basis. Each protocol has its pros and cons depending on the nature of the communications. Does there really need to be only one protocol to rule them all? Of course not.
In his session at @ThingsExpo, Chris Matthieu, co-founder and CTO of Octoblu, walk you through how Octoblu solved this problem by building an open source, cross-protocol IoT M2M instant messaging platform utilized by thousands of users and companies to allow disparate devices to communicate seamlessly with each other and other platforms.
[session] Hyper-#DigitalTransformation | @CloudExpo #ML #MachineLearning
In the next forty months – just over three years – businesses will undergo extraordinary changes. The exponential growth of digitization and machine learning will see a step function change in how businesses create value, satisfy customers, and outperform their competition. In the next forty months companies will take the actions that will see them get to the next level of the game called Capitalism. Or they won’t – game over. The winners of today and tomorrow think differently, follow different strategies, deploy different technologies, make cybersecurity a top priority and are cognizant the clock is ticking.
[session] nxFAST #IoT Platform | @ThingsExpo @Numerex #M2M #nxFAST
The IoT industry is now at a crossroads, between the fast-paced innovation of technologies and the pending mass adoption by global enterprises. The complexity of combining rapidly evolving technologies and the need to establish practices for market acceleration pose a strong challenge to global enterprises as well as IoT vendors.
In his session at @ThingsExpo, Clark Smith, senior product manager for Numerex, will discuss how Numerex, as an experienced, established IoT provider, has embraced a new model to address this challenge – IoT as a Service
[session] #LowCode Platforms | @CloudExpo #BigData #NoCode #ML #SaaS
You have great SaaS business app ideas. You want to turn your idea quickly into a functional and engaging proof of concept. You need to be able to modify it to meet customers’ needs, and you need to deliver a complete and secure SaaS application. How could you achieve all the above and yet avoid unforeseen IT requirements that add unnecessary cost and complexity? You also want your app to be responsive in any device at any time.
In his session at 19th Cloud Expo, Mark Allen, General Manager of the Progress Corticon and Rollbase businesses, will discuss and provide a deep understanding of the low-code application platforms that address these concerns.
Announcing @EmboticsCorp to Exhibit at @CloudExpo Silicon Valley | #IoT #M2M #Cloud
SYS-CON Events announced today that Embotics, the cloud automation company, will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
Embotics is the cloud automation company for IT organizations and service providers that need to improve provisioning or enable self-service capabilities. With a relentless focus on delivering a premier user experience and unmatched customer support, Embotics is the fastest and easiest way to automate provisioning across private/public/hybrid cloud infrastructures. Its flagship product, Embotics vCommander, is used by organizations including Nordstrom, NASA, Fanatics, Informatica and Charter Communications.
How to upgrade Parallels Desktop 9 or earlier versions to Parallels Desktop 12
Guest support blog post by: Ivan Latyshev How to upgrade Parallels Desktop 9 to Parallels Desktop 12 It’s hard to keep up with technology nowadays. New software is released seemingly every day, making it difficult to keep up with upgrades on all your devices. And what if you skipped a version or two of the software […]
The post How to upgrade Parallels Desktop 9 or earlier versions to Parallels Desktop 12 appeared first on Parallels Blog.