1. Virtualization and
security
Marco Rottigni
Solutions Architect – Product Management
Stonesoft
Slide 1 Copyright © 2008 Stonesoft Corporation All rights reserved.

2. What is ”virtualization”?
Application Application Application
Application
OS OS OS
OS
Virtual Virtual Virtual
Hardware Appliance Appliance Appliance
Virtualization Level
Hardware
Traditional x86 Architecture Virtualized Architecture
 One operating system per server  Multiple operating systems per server
 Software and hardware strictly tied  Hardware and Sotfware decoupled
 One application per server  Multiple applications per server
 Average load per server 5 -15%  Average usage per server 50-70%
 Dynamic resources usage
Slide 2 Copyright © 2008 Stonesoft Corporation All rights reserved.

3. Virtualization phases
1 2
Distributed Hypervisor ...
Slide 3 Copyright © 2008 Stonesoft Corporation All rights reserved.

4. 3: Virtualized Datacenters
Distributed Hypervisor
Slide 4 Copyright © 2008 Stonesoft Corporation All rights reserved.

5. Benefits
• Green IT
• Manageability
• Savings
• Business
Continuity
• What about security?
Slide 5 Copyright © 2008 Stonesoft Corporation All rights reserved.

6. Security perception in Virtualization
• VMWorld 2008: biggest event in Europe about
Virtualization!
• Over 4500 attendees...
• Over 120 breakout sessions...
• ...only TWO presentations about security!!!
(and one of them was a HowTo for a Honeypot)
Slide 6 Copyright © 2008 Stonesoft Corporation All rights reserved.

7. Example of a physical net…
Internet DMZ Office Network
Slide 7 Copyright © 2008 Stonesoft Corporation All rights reserved.

8. Security and Virtualization
• Same issues of physical
environments
• Need for defense in depth
• Virtual Appliance protection
(missing patches, exploit)
• Unified management
• Migration assistance
• Virtual appliance -> StoneGate
Slide 8 Copyright © 2008 Stonesoft Corporation All rights reserved.

9. Protected virtualized environment
Virtual
Appliance
Virtual
Appliance
Virtual
Appliance
Internet DMZ Office Network Virtual Environment
Slide 9 Copyright © 2008 Stonesoft Corporation All rights reserved.

10. Highly virtualized environment… protected
Virtual
Appliance
Virtual
Appliance
Virtual
Virtual
Appliance
Appliance
Internet DMZ Office Network
Virtual Environment
Slide 10 Copyright © 2008 Stonesoft Corporation All rights reserved.

11. Momentum is now!!!
Because…
• Customers have virtualized server, but not (yet)
networks
• StoneGate is Virtual since 2001!
• Hardware Appliance vendors are just... Hardware
appliance vendors!
• We offer “Secure (Virtual) Information Flow!
Slide 11 Copyright © 2008 Stonesoft Corporation All rights reserved.

12. Best of both worlds
Slide 12 Copyright © 2008 Stonesoft Corporation All rights reserved.

13. Take Home Messages
• We add Security to Virtualizzation
• We support migration from physical to virtualized
• Centralized Management, with low TCA, of both “worlds”
with SMC
Slide 13 Copyright © 2008 Stonesoft Corporation All rights reserved.

14. Your virtual
http://www.secureinformationflow.com
www.stonesoft.com
stonesoft@stonesoft.com
Slide 14 Copyright © 2008 Stonesoft Corporation All rights reserved.