SOLUTION OVERVIEW

A SINGLE SOLUTION FOR YOUR

HYBRID DATA CENTER
Corporate data centers are increasingly becoming software-defined. Network
interaction is moving from the physical to the virtual realm, opening up a new
range of possible attack scenarios. You need a security solution designed to
deliver optimum protection while preserving systems performance by harnessing
the software-defined data center‘s own capabilities and infrastructure.

Kaspersky Security for Virtualization has been designed to protect software-

defined data centers built on VMware vSphere®, including VMware NSX® for
vSphere. Kaspersky Security for Virtualization delivers advanced security
capabilities with almost zero impact on the efficiency of either compute or
networking platform processes.

Infrastructure and Security Working in Harness

VMware and Kaspersky Lab together address cyber-security threats with a
joint solution built upon the software-defined data center (SDDC), armed with
advanced security capabilities to deliver high-level protection from internal or
external threats.
VMWARE NSX®
VMware NSX is the leading network Kaspersky Security for Virtualization has been designed specifically to protect
virtualization platform that delivers enterprise-level infrastructure built on VMware vSphere technologies and the
the operational model of a virtual VMware NSX network virtualization platform. Customers benefit from an
machine for the network. industry-leading* anti-malware solution while retaining high consolidation ratios.
KASPERSKY SECURITY FOR
VIRTUALIZATION
Kaspersky Security for Virtualization BUILT-IN VMWARE NSX SERVICES
delivers permanent protection for
VMware infrastructures through Distributed Firewall Virtual Networks (VXLAN)
native integration with NSX:
• Agentless anti-malware security Server Activity Monitoring VPN (IPSec, SSL L2VPN)
for VMware compute and
networking platforms
KASPERSKY SECURITY FOR VIRTUALIZATION
• Virtual network IDS/IPS fight
against network threats
Anti-Malware Intrusion Prevention (IPS)
• Continuous protection even for
powered-off VMs
• Enterprise level manageability Security Policies Integration Security Tags Integration
and flexibility
• Retains full systems efficiency and …Multi-Layered Security
Automated Deployment
performance for Software-Defined Data Centers
Whether you are running a public or
private virtualized infrastructure, or
Kaspersky Security for Virtualization, interoperating with VMware vSphere
a combination, you can increase your
and the NSX network virtualization platform means infrastructure and security
efficiency and security by utilizing
VMware NSX interoperating with layers work in harness, bringing new levels of automation and protection to
Kaspersky Security for Virtualization. software-defined data centers, regardless of size or complexity.

K A S P E R S K Y S E C U R I T Y F O R V I R T U A L I Z AT I O N A N D V M W A R E N S X | 1
 SINGLE SOLUTION FOR YOUR HYBRID DATA CENTER

KASPERSKY LAB Kaspersky Security for Virtualization – Complementing

Kaspersky Lab is a global VMware NSX Security
cybersecurity company founded in
• Infrastructure and security layers work together, allowing for new levels of
1997. Kaspersky Lab’s deep threat
automation for corporate software-defined data centers.
intelligence and security expertise is
constantly transforming into security • Automated deployment for VMware NSX allows Kaspersky Lab’s Security
solutions and services to protect Virtual Machine (SVM) to ‘pop up’ automatically on the hypervisor.
businesses, critical infrastructure, • Security policy alignment means each VM receives precise security
governments and consumers capabilities, as defined by corporate policies based on the VM’s role.
around the globe. The company’s • Integration with NSX Security Tags allows your software-defined data center to
comprehensive security portfolio react in real time to security incidents, automatically reconfiguring the virtual
includes leading endpoint protection infrastructure as necessary.
and a number of specialized security
solutions and services to fight
Automated Security and Monitoring
sophisticated and evolving digital
• Full infrastructure scanning protects all VMs, whether they are online
threats. Over 400 million users
or offline, for even better security coverage right across your IT estate.
are protected by Kaspersky Lab
technologies. They help 270,000 • Routine scanning of all VMs can be pre-scheduled at a granular level,
corporate clients protect what so security tasks can be orchestrated according to your needs.
matters most to them. • Self-protection and advanced SNMP-based monitoring guarantees that the
FITS ANY ENTERPRISE solution is always available, and able to provide detailed information for
Integrated solution makes sure that extra control.
ROI of your virtualization projects • Native support for VMware vCenter Server® as well as NSX Manager means
remains on high levels. the security layer is always aware of any infrastructure changes.
• Improved operations through
the automated deployment of The Right Balance of Protection and Performance
security appliances • Award-winning anti-malware protection* engineered for virtualization
• Granular security capabilities allows the offloading of file-scanning tasks from VMs onto a dedicated
delivered fast through security SVM for greater efficiency.
policies and security tags. • Virtual Network Intrusion Detection and Prevention (IDS/IPS) works
in agentless mode, shielding your entire virtualized infrastructure from
• Protective scanning even for
network-based threats.
powered-off VMs, thanks to the Full
Infrastructure Scanning option. • Cache based optimization ensures that recently scanned files are not
re-scanned during routine scanning.
See this solution in the VMware
• Security solution designed to scan both powered-on and powered-off
Solution Exchange.
virtual machines utilizing resource efficient approach.
www.solutionexchange.vmware.com/
store/companies/kaspersky-lab Superior Reliability and Manageability
• A single unified management console for virtual, physical and mobile devices
means you can enforce consistent security policies across your entire IT estate.
• Deployment with no downtime allows installing security solution without
a need to reboot any VMs or put the host server into maintenance mode.
• Intelligent scan task orchestration and automation eliminates any peaks
in hypervisor resource consumption to preserve overall efficiency.
• Feature-rich reporting and monitoring makes it easier to manage and supervise
security throughout the organization.

* www.usa.kaspersky.com/files/pdf/Kaspersky_Lab_TOP3_2016.pdf

SOLUTION OVERVIE W | 2
 SINGLE SOLUTION FOR YOUR HYBRID DATA CENTER

“With
“ Kaspersky Lab’s security Technological Excellence
solution now natively working Kaspersky Security for Virtualization has been engineered specifically to work
with virtualization platforms, while traditional security solutions consume too
with our virtual environment,
many resources. Technological benefits for servers include:
we can also easily offer
• Security Automation allowing bidirectional policy-based communications
automated protection for between the infrastructure and its security layer.
each virtual machine across • Full infrastructure scanning of both powered-on and powered-off virtual
the entire infrastructure. machines in your software-defined data center.
Security tags and policy-based • Efficiency is conserved by offloading all resource-intensive tasks to dedicated
security appliances and leveraging security task orchestration.
operation allows us to deliver
• No more ‘update storms’ and ‘scanning storms’, or ‘windows of
security capabilities in a faster vulnerabilities” as there are fewer databases to update.
and more efficient way.” • Virtual network IDS/IPS fights against network-based attacks.
LURIE TURCANU
CHIEF TECHNOLOGY OFFICER How It Works
E-GOVERNMENT CENTER OF Just as server virtualization transforms physical nodes into virtualized pools
THE REPUBLIC OF MOLDOVA
of computing resources, the VMware NSX network virtualization platform
transforms the data center network into a pool of network resources which
can be created, changed, utilized and redistributed dynamically. Kaspersky
Security for Virtualization interoperates with VMware NSX allowing for more
LEARN MORE
efficient and secure operations. With no agent required on each VM, impact
To learn more about how Kaspersky on virtual platform performance is near-zero, administrative tasks consume fewer
Security for Virtualization and resources, and all VMs within the infrastructure are protected instantaneously.
VMware NSX can provide superior
protection for your software-
defined data center, visit
www.kaspersky.com/enterprise-
security/virtualization or contact
your Kaspersky Lab or VMware
partner or sales representative.

HYPERVISOR

The joint solution delivers advanced security capabilities to every VM running

on VMware vSphere infrastructure. While Kaspersky Lab’s solution is focused
on identifying and blocking known and unknown threats, resource efficiency of
the infrastructure remains paramount.

VMware, Inc. 3401 Hillview Avenue Palo Alto CA 94304 USA Tel 877-486-9273 Fax 650-427-5001 www.vmware.com
Copyright © 2017 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at
http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of VMware, Inc. and its subsidiaries in the United States and other jurisdictions. All other marks and names mentioned
herein may be trademarks of their respective companies. Item No: 40653WF-VMW-SO-KASPERSKY-SEC-VIRT-NSX-A4-102
6/17