VMware VSHIELD APP 1.0 - API Uživatelský manuál Strana 9
- Strana / 104
- Tabulka s obsahem
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
VMware, Inc. 9
1
VMwarevShield™isasuiteofnetworkedgeandapplication‐awarefirewallsbuiltforVMwarevCenterServer
integration.vShieldinspectsclient‐servercommunicationsandinter‐virtual‐machinecommunicationsto
providedetailedtrafficanalyticsandapplication‐awarefirewallprotection.Itisacriticalsecuritycomponent
toprotectvirtualizeddatacentersfromattacksand
misuse,andhelpsachievecompliance‐mandatedgoals.
Thischapterincludesthefollowingtopics:
“vShieldComponents”onpage 9
“CompatibilityBetweenDifferentRESTAPIVersions”onpage 10
“PortsRequiredforvShieldRESTAPI”onpage 12
“A n IntroductiontoRESTAPIforvShieldUsers”onpage 11
ThisguideassumesyouhaveadministratoraccesstotheentirevShieldsystem.Ifyouareunabletoaccessa
screenorperformaparticulartask,consultyourvShieldadministrator.
vShield Components
vShieldincludescomponentsandservicesessentialforprotectingvirtualmachinesinavirtualizeddatacenter.
vShieldcanbeconfiguredwithaWeb‐baseduserinterface,acommandlineinterface(CLI),oraRESTAPI.
TorunvShield,youneedonevShieldManagervirtualapplianceandatleastonevShieldApporvShield
Edge
virtualappliance.ThevShieldManagervirtualappliancecanrunonadifferentESXhostthanthevShieldApp
andvShieldEdgevirtualappliances.
vShield Manager
vShieldManageristhecentralizedmanagementcomponentofvShield.Youinstallitasavirtualapplianceby
deployinganOVAfromthevSphereClient.UsingvShieldManager’suserinterfaceorvSphereClientplug‐in,
youcaninstall,configure,andmaintainvShieldappliances.ThevShieldManageruserinterfaceleveragesthe
vSphereWeb
ServicesSDKtodisplaytabswithinthevSphereClientinventorypanel.Fordetailsaboutthe
userinterface,seethevShieldAdministrationGuide.
vShield App
AvShieldAppvirtualappliancemonitorsalltrafficintoandoutofanESXhost,andbetweenvirtualmachines
onthehost.vShieldAppprovidesapplication‐awaretrafficanalysisandstatefulfirewallprotection,andit
regulatestrafficbasedonasetofrules,similartoanaccesscontrollist(ACL).
As
trafficpassesthroughavShieldApp,eachsessionheaderisinspectedtocatalogthedata.ThevShieldApp
createsaprofileforeachvirtualmachinedetailingtheoperatingsystem,applications,andportsusedfor
networkcommunication.Basedonthisinformation,thevShieldAppallowsephemeralportusebypermitting
dynamicprotocols
suchasFTPorRPCtopassthrough,whilemaintaininglockdownonports1024andhigher.
YoucannotprotecttheESXServiceConsole,ESXidirectconsoleuserinterface(DCUI),ortheVMkernelwith
vShieldAppbecausethesecomponentsarenotvirtualmachines.
Overview of VMware vShield
1
- EN-000608-00 1
- 2 VMware, Inc 2
- Contents 3
- 5 vShieldEdgeManagement 37 4
- 6 vShieldAppManagement 53 5
- Appendix 77 6
- About This Book 7
- Support Offerings 8
- VMware Professional Services 8
- Overview of VMware vShield 9
- 10 VMware, Inc 10
- Multitenancy 11
- How REST Works 12
- Using the vShield REST API 12
- About the REST API 13
- RESTful Workflow Patterns 13
- 14 VMware, Inc 14
- VMware, Inc. 15 15
- Retrieving Tech Support Logs 16
- User Management 17
- Update a Local User Account 18
- Remove a User Account 18
- Role Management 19
- Get a List of Possible Roles 20
- Get a List of Scoping Objects 20
- Create an IPset on a Scope 20
- Get Details of an IPset 21
- Modify an Existing IPset 21
- Delete an IPset 21
- Create a MACset on a Scope 22
- Get Details of a MACset 22
- Modify an Existing MACset 22
- Delete a MACset 23
- Get Members for a Scope 24
- Get Security Group Details 24
- Modify a Security Group 24
- Delete a Security Group 25
- Add Member to Security Group 25
- List Applications on a Scope 25
- Add Application to a Scope 26
- Get Details of an Application 26
- Modify Application Details 27
- Delete Application from Scope 27
- 28 VMware, Inc 28
- Endpoint 29
- 30 VMware, Inc 30
- VMware, Inc. 31 31
- 32 VMware, Inc 32
- Installing a vShield Edge 33
- 34 VMware, Inc 34
- VMware, Inc. 35 35
- Uninstalling a vShield Edge 36
- Configuring vShield Edge 37
- Switch to New API Version 38
- Configuring Edge Services 39
- Configure Firewall 40
- Change Firewall Rule to Allow 41
- Revert Firewall to Default 42
- Configure Static Routing 43
- Configure NAT 43
- Delete NAT Configuration 44
- Configure Load Balancer 45
- Miscellaneous 46
- Configure VPN 47
- Manage VPN Service 48
- Delete the VPN Configuration 48
- VMware, Inc. 49 49
- Operating vShield Edge 50
- Debugging and Support 51
- Get Service Statistics 52
- Retrieve Datacenter State 53
- Modify Datacenter State 54
- VMware, Inc. 55 55
- Working with SpoofGuard 56
- Working with Namespaces 57
- Get Namespace Details 58
- Delete a Namespace 58
- Upgrading vShield App 59
- 60 VMware, Inc 60
- Register a Vendor 61
- Register a Solution 62
- Activate a Solution 63
- Get Vendor Registration 64
- Get Solution Registration 64
- Get IP Address of a Solution 64
- Unregister a Vendor 64
- Status Codes and Error Schema 65
- Error Schema 66
- VMware, Inc. 67 67
- Retrieve All Regulations 68
- Enable a Regulation 68
- VMware, Inc. 69 69
- Configure File Filters 70
- Retrieve the Saved SDD Policy 71
- Request: 72
- Data Security Scanning 73
- Analyzing Results 74
- VMware, Inc. 75 75
- 76 VMware, Inc 76
- 78 VMware, Inc 78
- VMware, Inc. 79 79
- 80 VMware, Inc 80
- VMware, Inc. 81 81
- 82 VMware, Inc 82
- VMware, Inc. 83 83
- 84 VMware, Inc 84
- VMware, Inc. 85 85
- 86 VMware, Inc 86
- VMware, Inc. 87 87
- 88 VMware, Inc 88
- VMware, Inc. 89 89
- 90 VMware, Inc 90
- VMware, Inc. 91 91
- 92 VMware, Inc 92
- VMware, Inc. 93 93
- 94 VMware, Inc 94
- VMware, Inc. 95 95
- 96 VMware, Inc 96
- VMware, Inc. 97 97
- 98 VMware, Inc 98
- VMware, Inc. 99 99
- Error Message Schema 100
- VMware, Inc. 101 101
- Appendix 101
- 102 VMware, Inc 102
- VMware, Inc. 103 103
- 104 VMware, Inc 104
Související produkty a manuály pro Sítě VMware VSHIELD APP 1.0 - API
(23 stránky)© 2020, manymanuals.cz. Všechna práva vyhrazena. | 0.089 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce