Database Reference
In-Depth Information
Figure 8.27
Completely virtualized networking and security with VMware NSX.
Figure 8.27
(which comes from VMworld 2013's NET5266, “Bringing Network
Virtualization to VMware Environments with NSX”) shows how completely the
networking and security virtualization can be when using VMware NSX. Each
component of the three-tier application is separated from a security perspective with
routing and firewall rules implemented and enforcement distributed to each vSphere
host. Additionally, if applications or servers on a physical VLAN need to access the
environment, NSX can provide a bridge to the physical VLAN.
With network virtualization, your security can become context aware. By this we mean
instead of just being based on source and destination constructs, security policy can
include physical access location, time of day, and user identity. This allows you to
secure access to certain areas based on where and when a user logs in, where they are
