H3C NGIP Integration IT management security into the cloud era

With the spread of cloud and cloud applications, cloud computing has entered a fast-growing period. A high quality, trusted cloud network and cloud security system are the foundation for each cloud computing center to operate successfully. Recently in Hangzhou, officially opened the curtain of H3C new products new Technology Roadshow, in addition to fully display cloud computing network strategy and solutions, H3C Solution Minister Kangliang also to the user to show the H3C cloud computing security Concepts and cloud computing network management solutions.

1. Cloud Computer security

Kangliang that there are two important concepts for cloud security: "Virtualization Security" and "Security virtualization."

Virtualization Security: Previously mentioned data center security is mainly to solve the physical host security problems, now as the data center from the physical host into a virtual host, then virtualization security is to change from the physical host security to virtual Host security, which is called virtualization security, that is, virtual environment security.

Security virtualization: Just want security capabilities to be like virtualization technology into a resource, into a pool, on-demand dynamic increase or reduction, this is called security virtualization.

H3C Cloud Computing Security solution

"To ensure the security of cloud computing networks, the two issues must be addressed, namely virtualization security and security virtualization," Kangliang said. ”

Today's virtualization security solutions are basically implemented through software, such as the software simulation of firewalls, IPS, anti-virus terminals. These are on the virtual machine, in software way, using the physical server CPU, memory simulation implementation. One of the problems with this kind of solution is the weakening of the intrinsic hardware security product value of the user. In the future virtualization environment security solutions to the end of the software route or hardware route? In this regard, H3C's choice is to stick to the hardware line. H3C through the Vepa to realize the virtual machine from the host to the network mapping, once the virtual machine built to the network, then other online hardware-based network security devices (such as firewalls, IPS, etc.) can be mapped to the network virtual machine according to its strategy to protect. H3C is hardware the virtual machine security solution.

H3C is the first networked virtualization technology Cross-platform, Universal network vendors, the realization of the switch virtualization, router virtualization, network virtualization, and the security host as a physical host to achieve 1:n virtualization. On this basis, can turn the security ability into a resource pool (such as firewall pool, IPs pool, etc.), and then put these capabilities through IRF technology, 1:N virtualization, on-demand combination to meet the different users, different organizations, different departments of security policy requirements.

2, Cloud computing network management Solutions

If the traditional network management is only the hardware resource management, then in the virtual environment needs to realize the management of the virtual resources, to achieve the arrangement, scheduling and delivery of resources. Early H3C network management can only achieve the management of hardware resources, in recent years, H3C gradually put the virtualization resources, cloud management functions into the IMC management platform to achieve cloud-oriented overall management.

As a data center management product for the "cloud Era", H3C IMC DCM 2.0 provides a more intelligent management guarantee for a resource-pooling cloud computing environment, helping users better manage the data centers of the cloud era. H3C IMC 2.0 enables the management of virtual machines such as VMware, Hyper-V, the management and configuration of vswitch, the ability to automate network configuration in vswitch environments, the dynamic migration of network configuration, and the exact location of connections between VMS and physical switches can provide management clients based on intelligent terminals to facilitate the management of the network 24x7 monitoring.

H3C IMC Management platform realizes the integration from hardware resources to virtualization layer and cloud management, and constructs a whole cloud management system.

H3C IMC Data Center Management Solution 2.0

H3C's network and secure product line provides the cloud computing center with high-performance, highly reliable, highly secure, scalable, easily managed cloud network and cloud security solutions to ensure a long-term, stable and safe operation of the cloud computing center.