Trend technology deep security escort Guangdong China Tobacco Group Cloud computing Platform

IT industry wind "cloud", cloud computing is brewing a new change, it has the tobacco industry's information construction has a significant impact. As the tobacco industry's first attempt to cloud computing applications group Enterprises, Guangdong China Tobacco Industry Co., Ltd. (hereinafter referred to as: Guangdong Tobacco) together with the global server security, virtualization and cloud computing security leadership-trend technology, through the deployment of trend technology to provide the cloud center dedicated security program Deepsecurity, Comprehensive upgrade of the cloud Center security level, in the protection of the rapid development of cloud business, but also the future promotion of cloud Desktop has laid a solid foundation.

Tracing the "source" of cloud center performance bottlenecks

Founded in 2003, Guangdong Tobacco, responsible for the Guangdong cigarette industry production and management, under the Guangzhou cigarette factory, Meizhou cigarette factory, Shaoguan cigarette factory, Zhanjiang cigarette factory, a total of more than 5,000 employees. As the leading provincial tobacco industry company in China, Guangdong Tobacco has provided advanced cloud computing application platform to internal business unit by using virtualization technology in the end of 2012. However, after a year of operation, the "two performance problems" in the management of cloud center system seriously hinder the user experience in the innovation application.

Performance Bottleneck One: disk I/O storms, causing virtual machines to run slowly.

Through the long-term monitoring of IT operational data analysis shows that a busy period of office time, deployed in the cloud center of the business system access rate will be significantly reduced. At this point, logging on to the Cloud Center management platform for Inspection will reveal a significant increase in the number of storage I/O to the ESXi host. After in-depth analysis by virtualization manufacturers and Cloud Center operational Engineers, the source of the disk I/O storm that led to the cloud center was the traditional antivirus client deployed on each virtual machine. Because traditional antivirus clients are not designed for virtualized environments, a large amount of disk I/O access is generated during real-time virus scans. When the operation exceeds the threshold that the ESXi host can support, it causes disk requests to accumulate, resulting in a disk storm that eventually causes the virtual machine to become unusually slow.

As the most in line with Guangdong's Smoke center security needs of products, trends in technology deepsecurity let administrators no longer have to "performance" uneasy. In this respect, Mr. Lee said: Security is a whole, both physical and virtual machines need to protect against malware, but virtualized security solutions must be designed for shared resource environments, never run out of performance because of security. After the implementation of deepsecurity, we can safely extend the cloud technology to the virtual desktop and other innovative applications, and the next phase of cloud business development and large data application prospects more confidence. ”

Performance bottleneck Two: Antivirus software scanning takes too long, affecting the normal operation of the business.

When the business system is running in the physical machine environment, all the computing resources are independent, the traditional anti-virus software can finish the work smoothly before the next day when performing the preset task "sweeping", without affecting the normal operation of the business. But when the business migrates to the cloud center, the resources of the physical machine are shared by multiple virtual machines, and the resources are allocated according to the priority level of the virtual machine when performing the overall scan. This leads to a lower priority virtual machine that takes more time to complete the task and affects the user's normal use the next day.

In the face of the difficult problems, Guangdong China tobacco engineer Li said: "The existing traditional anti-virus software, because they are not designed for virtualized environments, if deployed in the cloud center, the cloud center of the various computing resources will bring enormous pressure, and affect the normal operation of the business, and even lead to a virtual environment crash. Obviously, traditional anti-virus software is no longer applicable to the needs of the new environment. After many discussions, virtualization is imperative. To this end, we need to consider the use of security solutions developed specifically on the virtualization platform to improve the security problems described above and respond to the ever-changing threat attacks. ”

"Agentless protection" allows cloud applications to release

In order to ensure the sustainability of the development of the cloud center, while avoiding the threat of viruses to data, applications and networks, Guangdong Tobacco has been looking for the best solution. An accidental opportunity to learn from the trend science and technology conference that Deepsecurity is currently the most compatible security product in the industry with VMware, and that it can leverage the Vshieldendpoint security interface released by VMware to provide "agentless" on the Vmwareesxi platform The protection scheme, which directly deploys the protection client on the ESXi of the virtualization platform, can effectively solve all the problems encountered before. After in-depth communication with the trend technology consultants and repeated testing, Guangdong Tobacco finally decided to use trend technology deep security as its cloud center to ensure the safety, so as to promote the construction of the virtualization process.

"Trend science and technology deepsecurity effectively solve the" disk I/O Storm "a series of virtualized environment security issues"

During the implementation phase, the Deepsecurity agentless feature delivers superior performance and management advantages over traditional anti-virus products, and it solves the security challenges specific to virtualization, such as disk I/O storms, lengthy scans, and so on. With the continuous expansion of the application category of Guangdong Tobacco Virtualization, deepsecurity agentless technology has completely avoided the generation of disk I/O storms, so that the cloud center in the office busy business access is no longer slow, fully demonstrated that the cloud center low-cost, efficient, easy to manage the construction value.