{"id":3012,"date":"2019-01-14T09:09:06","date_gmt":"2019-01-14T14:09:06","guid":{"rendered":"http:\/\/chrisgrundemann.com\/?p=3012"},"modified":"2021-07-08T11:10:11","modified_gmt":"2021-07-08T15:10:11","slug":"security-virtualization","status":"publish","type":"post","link":"https:\/\/chrisgrundemann.com\/index.php\/2019\/security-virtualization\/","title":{"rendered":"Security through Virtualization"},"content":{"rendered":"\n

We tend to talk<\/a> a lot<\/a> about security through obscurity. But what about security through virtualization?<\/p>\n\n\n\n

I’ve been thinking about both security and virtualization quite a bit lately. I also had the privilege of visiting VMware<\/a>‘s HQ in Palo Alto with Tech Field Day<\/a> twice<\/strong> last year. That’s interesting because VMware is using their place as the virtualization layer between infrastructure and applications as a secure control point to reduce attack surfaces. But before we dig into that, we need to zoom out a bit and take in some needed context.<\/p>\n\n\n\n

Virtual Networks<\/h2>\n\n\n\n

I’ve seen the future of networking<\/a> and it’s virtual. Of course, so’s the past. That’s kind of what the whole OSI model thing was trying to help us with. And it’s why basically every network engineer has practice drawing physical AND logical diagrams.<\/p>\n\n\n\n

What’s actually new is the growing levels of abstraction and automation.<\/p>\n\n\n\n

Business Fabrics<\/h2>\n\n\n\n

What’s also new is the drastically increasing relevance of technological infrastructure to organizations of all sizes and shapes. As early as 2011 Forbes had declared that every company is a software company<\/a>. More recently, Thompson Reuters stated that all companies are technology companies<\/a>. And the trend of executives working to raise their organizations’ digital quotient<\/a> to succeed during this digital revolution<\/a> shows no signs of slowing down.<\/p>\n\n\n\n

But what the heck does ‘going digital’ have to do with virtual networks?<\/p>\n\n\n\n

As rapidly as technology is evolving, there appears to be one immutable constant. That universal need is connectivity. The network is the most fundamental layer of any infrastructure and that’s simply not changing.<\/p>\n\n\n\n

The demands placed upon that network and the scale of its importance to the mission of your organization, however, are changing. Now we need more than a collection of devices that forward frames. Even more than a collection of networks that connect to each other. We need a network platform that connects all the things and is easy to manage. <\/p>\n\n\n\n

When you combine a ubiquitous network fabric with identity and policy controls and then layer on consistent device and application controls, you approach the nirvana of a true business fabric. A holistic technology platform upon which to conduct your business. Well, mostly. For this to really work, you need visibility and<\/strong> control.<\/p>\n\n\n\n

On Visibility & Control<\/h2>\n\n\n\n

Automation and abstraction are hot right now. That’s why everything is “Software Defined” these days. You’ve got SD dash network, WAN, security, perimeter… Heck, even the whole data center can be software defined.<\/p>\n\n\n\n

But why?<\/p>\n\n\n\n

What are we really talking about when we throw out terms like virtualization and abstraction or disaggregation and automation? Why<\/strong> do we want everything software defined?<\/p>\n\n\n\n

It’s all about visibility and control.<\/p>\n\n\n\n

We want to put things into the infrastructure (provisioning\/control) and get things out of the infrastructure (telemetry\/visibility). And we want to do this as efficiently and effectively as possible. In other words, I shouldn’t have to manually log into multiple devices to find out what VLAN is provisioned, nor to provision it when we find that it’s missing.<\/p>\n\n\n\n

We also want: Control over what hardware and software we use in our infrastructure. Visibility into where all of our workloads currently live across all of our pods and clouds. Control of who can change what, anywhere in the infrastructure. Visibility of policy and intent violations that occur anywhere across the organization.<\/p>\n\n\n\n

Virtually Secure<\/h2>\n\n\n\n

All of this visibility and control across a cohesive business fabric does wonders for our security posture.<\/p>\n\n\n\n

\n

@VMwareSecurity<\/a> says the problems with Security are that it is bolted on, reactive, fragmented, asymmetric, and infrastructure-centric. Hard to disagree. #XFD1<\/a><\/p>— \ud83c\udf35 \u1455\u157c\u1587I\u1515 G\u1587\u144c\u144e\u15eaE\u15f0\u15e9\u144e\u144e (@ChrisGrundemann) December 13, 2018<\/a><\/blockquote>