VMware® Security Operations for the Software-Defined Data Center

In this course, students learn how to use the VMware Software-Defined Data Center (SDDC) product portfolio and tools to better manage administrator access, harden your VMware vSphere® environment, and secure data at rest and in motion.

By the end of the course, you should be able to meet the following objectives:

Describe the concepts involved in securing a software-defined data center and protecting the data in the data center
Manage vSphere administrator access to hosts and the VMware vCenter Server™ system based on identified job roles and requirements
Implement best-practice security of vSphere components based on organizational security policies
Configure data protection for data at rest and data in motion
Manage protection for virtual machines, endpoints, and networks
Use micro-segmentation to protect and manage multitier applications and network data
Perform activity monitoring and logging, and explore relevant
logs to meet compliance requirements
Use VMware NSX™ security groups, policies, and tags to automate deployment and security processes
Use automation to respond to security-related events

Course Outline

1 - COURSE INTRODUCTION

Introductions and course logistics
Course outline
Course objectives

2 - SECURITY CONCEPTS

Key IT security principles for the SDDC
Differences between securing traditional infrastructures and virtual infrastructures
Identity and access management concepts for SDDC
Methods to secure your virtual infrastructure components
Guest operating system access security
Hardening concepts and how they apply to virtual infrastructure components

3 - VSPHERE SECURITY IDENTITY AND ACCESS MANAGEMENT

Role-based access control concepts
Configuring role-based access control for VMware ESXi™ and vCenter Server
Configuring vSphere single sign-on for administrative access
Password hardening options
Configuring ESXi local user management and integration with Active Directory (AD)
ESXi security profiles and access to services

4 - VSPHERE HARDENING

ESXi host hardening
Implementing lockdown mode on ESXi hosts
Configuring ESXi host-based firewall settings
vCenter Server hardening
Tools to reduce infrastructure vulnerabilities
Implementing hardening best practices based on the vSphere Hardening Guide

5 - DATA PROTECTION

Data encryption technology
Data-at-rest encryption options
Datastore security options
Configuring vSphere security certificate management using VMware Certificate Authority and VMware Endpoint Certificate Services
Using the Certificate Automation Tool to manage vSphere certificates
Establishing and using an IPsec VPN
Using the VMware Endpoint Certificate Store

6 - NETWORK SECURITY

Managing network data in a VMware SDDC
Security policies and settings of vSphere switches
Configuring vSphere advanced security features for distributed switches using the VMware NSX distributed firewall and distributed router to implement micro-segmentation
Protecting and managing north-south traffic with VMware NSX
Edge™ services gateway and physical firewalls
Managing access to the vSphere management network
Using VMware NSX virtual switch features to implement network security
Designing clusters and racks to minimize vulnerabilities
Limiting access to vSphere management networks
Hardening network infrastructure components

7 - VIRTUAL MACHINE AND APPLICATION PROTECTION

Securing virtual machine guest operating systems
Using VMware NSX with Service Composer for Endpoint Protection
Using distributed firewalls and micro-segmentation to isolate and protect virtual machines
Using VMware NSX identity-based firewalls to control network traffic based on AD user IDs
Additional VMware NSX functionality using integration with third-party solutions

8 - DATA CENTER SECURITY COMPLIANCE

Using VMware vRealize™ Log Insight™ to identify and analyze security-related log entries
Implementing a distributed logging environment
VMware vRealize™ Configuration Manager™ compliance checkers
VMware Realize™ Operations Manager™ compliance monitoring
vRealize Configuration Manager and vRealize Operations Manager integration
Performing network flow monitoring to analyze network traffic

9 - AUTOMATING DATA CENTER SECURITY

Using VMware functions and tools to enforce consistent organizational security policies during infrastructure deployment
Automating responses to security events
Implementing security automation with security groups, security policies, and security tags
Automatically applying security settings to newly provisioned virtual machines based on VMware NSX security policies

Actual course outline may vary depending on offering center. Contact your sales representative for more information.

Course Outline

1 - COURSE INTRODUCTION

Introductions and course logistics
Course outline
Course objectives

2 - SECURITY CONCEPTS

Key IT security principles for the SDDC
Differences between securing traditional infrastructures and virtual infrastructures
Identity and access management concepts for SDDC
Methods to secure your virtual infrastructure components
Guest operating system access security
Hardening concepts and how they apply to virtual infrastructure components

3 - VSPHERE SECURITY IDENTITY AND ACCESS MANAGEMENT

Role-based access control concepts
Configuring role-based access control for VMware ESXi™ and vCenter Server
Configuring vSphere single sign-on for administrative access
Password hardening options
Configuring ESXi local user management and integration with Active Directory (AD)
ESXi security profiles and access to services

4 - VSPHERE HARDENING

ESXi host hardening
Implementing lockdown mode on ESXi hosts
Configuring ESXi host-based firewall settings
vCenter Server hardening
Tools to reduce infrastructure vulnerabilities
Implementing hardening best practices based on the vSphere Hardening Guide

5 - DATA PROTECTION

Data encryption technology
Data-at-rest encryption options
Datastore security options
Configuring vSphere security certificate management using VMware Certificate Authority and VMware Endpoint Certificate Services
Using the Certificate Automation Tool to manage vSphere certificates
Establishing and using an IPsec VPN
Using the VMware Endpoint Certificate Store

6 - NETWORK SECURITY

Managing network data in a VMware SDDC
Security policies and settings of vSphere switches
Configuring vSphere advanced security features for distributed switches using the VMware NSX distributed firewall and distributed router to implement micro-segmentation
Protecting and managing north-south traffic with VMware NSX
Edge™ services gateway and physical firewalls
Managing access to the vSphere management network
Using VMware NSX virtual switch features to implement network security
Designing clusters and racks to minimize vulnerabilities
Limiting access to vSphere management networks
Hardening network infrastructure components

7 - VIRTUAL MACHINE AND APPLICATION PROTECTION

Securing virtual machine guest operating systems
Using VMware NSX with Service Composer for Endpoint Protection
Using distributed firewalls and micro-segmentation to isolate and protect virtual machines
Using VMware NSX identity-based firewalls to control network traffic based on AD user IDs
Additional VMware NSX functionality using integration with third-party solutions

8 - DATA CENTER SECURITY COMPLIANCE

Using VMware vRealize™ Log Insight™ to identify and analyze security-related log entries
Implementing a distributed logging environment
VMware vRealize™ Configuration Manager™ compliance checkers
VMware Realize™ Operations Manager™ compliance monitoring
vRealize Configuration Manager and vRealize Operations Manager integration
Performing network flow monitoring to analyze network traffic

9 - AUTOMATING DATA CENTER SECURITY

Using VMware functions and tools to enforce consistent organizational security policies during infrastructure deployment
Automating responses to security events
Implementing security automation with security groups, security policies, and security tags
Automatically applying security settings to newly provisioned virtual machines based on VMware NSX security policies

Actual course outline may vary depending on offering center. Contact your sales representative for more information.

Contact Us For Price

Course Length: 5 Days

Enroll Now

1. Choose a Date | 2. Click Enroll Now

Need Help Picking the Right Course? Give us a call! 781-388-0026