Category Archives: Network Architecture

Advanced Security with VMware NSX and Check Point vSEC [Video]

Posted on September 28, 2015 by Humair

In a prior blog, I wrote about VMware NSX and Check Point vSEC integration for advanced security. Check out the VMware NSX Check Point vSEC demo on the VMware NSX YouTube channel or embedded directly below. In this demo, I … Continue reading →

Posted in Check Point, Network Architecture, Network Security, Networking, Technology, VMware | Tagged advanced security, Anti-Bot, Anti-Virus, Application Control, Check Point, Check Point vSEC, Check Point vSEC solution, checkpoint, checkpoint vsec, demo, DFW, distributed firewall, distributed security architecture, Identity Awareness, IDS, Intel, IPS, L5-L7, L5-L7 NSX security, L5-L7 security, McAfee, microsegmentation, microsegmentation model, network virtualization platform, NSX, NSX advanced security, NSX advanced security policies, NSX Check Point Demo, NSX Check Point Demo Video, NSX Check Point Video, NSX Check Point vSEC solution, nsx checkpoint, nsx checkpoint vsec, NSX DFW, NSX Distributed Firewall, NSX network virtualization, NSX network virtualization platform, NSX Technology Partners, NSX third party security products, Palo Alto Networks, perimeter-centric security, Rapid 7, security, Symmantec, Threat Emulation, Trend Micro, Tufin, URL Filtering, video, virtualization, vmware, vmware checkpoint vsec, VMware network virtualization, VMware network virtualization platform, VMware NSX, VMware NSX advanced security, VMware NSX advanced security policies, VMware NSX Check Point vSEC Demo, VMware NSX Check Point vSEC Demo Video, VMware NSX Check Point vSEC solution, VMware NSX Check Point vSEC Video, vmware nsx checkpoint vsec, VMware NSX DFW, VMware NSX Distributed Firewall, VMware NSX network virtualization, VMware NSX network virtualization platform, VMware NSX Technology Partners, VMware NSX third party security products, vritualization security, vritualization security services, vSEC | Leave a comment

VMware NSX 6.2 Adds Cross-vCenter Networking and Security

Posted on September 5, 2015 by Humair

Ahead of this year’s VMworld which was just this past week (08/30 – 09/03), VMware recently released NSX 6.2 with many new and exciting features. You can see a list of new features listed in the NSX 6.2 online release … Continue reading →

Posted in Network Architecture, Networking, Technology, Virtualization and Cloud Computing, VMware, VMware | Tagged 8 NSX Managers, ARP snooping, Central CLI, CLI monitoring, communication channel health monitoring, Cross-VC NSX, Cross-VC NSX object, Cross-VC NSX objects, Cross-vCenter, Cross-vCenter Networking and Security, DFW, DHCP snooping, distributed firewall, DSX logical router, eight NSX Managers, global, host locale ID, ip address, IP Set, local egress, locale ID, logical router, logical switch, MAC address, MAC Set, multi-site deployment, multi-vcenter NSX, Network Virtualization, north-south, North-South traffic, NSX, NSX 6.2, NSX 6.2 new feature, NSX Controller Cluster, NSX Controllers, NSX DFW, NSX Distributed Firewall, NSX DLR, nsx logical router, NSX logical switch, NSX LS, NSX Manager, NSX multi-site deployment, NSX network virtualization, NSX Security Groups, NSX UDLR, NSX Universal Controller Cluster, NSX Universal Controllers, NSX Universal DFW, NSX Universal DFW Rules, NSX Universal Distributed Firewall, NSX Universal Distributed Logical Router, NSX Universal Logical Switch, NSX Universal LS, NSX Universal Rules, NSX Universal Synchronization Service, NSX Universal Transport Zone, NSX UTZ, NSX with multiple vCenters, primary NSX Manager, secondary NSX Manager, security, Security Groups, trace flow, UDLR, universal, Universal Controller Cluster, Universal DFW, Universal DFW rules, Universal Distributed Firewall, Universal distributed firewall rules, Universal Distributed Logical Router, Universal DLR, Universal Logical Switch, Universal LS, Universal rules, Universal Synchronization Service, Universal Transport Zone, UTZ, vCenter, VMware network virtualization, VMware NSX 6.2, VMware NSX Manager, VMware vCenter, VSS | 1 Comment

VMware NSX: Advanced Security Services with Check Point vSEC

Posted on August 12, 2015 by Humair

In early 2014, the well known security company, Check Point, announced it was collaborating with VMware to integrate its security software with NSX to help automate and simplify the provisioning of advanced security services. Just last month, Check Point announced … Continue reading →

Posted in Network Architecture, Network Security, Networking, Security, Technology, Virtualization and Cloud Computing, VMware, VMware | Tagged advanced security, Anti-Bot, Anti-Virus, Application Control, Check Point, Check Point vSEC, Check Point vSEC solution, checkpoint, checkpoint vsec, DFW, distributed firewall, distributed security architecture, Identity Awareness, IDS, Intel, IPS, L5-L7, L5-L7 NSX security, L5-L7 security, McAfee, microsegmentation, microsegmentation model, network virtualization platform, NSX, NSX advanced security, NSX advanced security policies, NSX Check Point vSEC solution, nsx checkpoint, nsx checkpoint vsec, NSX DFW, NSX Distributed Firewall, NSX network virtualization, NSX network virtualization platform, NSX Technology Partners, NSX third party security products, Palo Alto Networks, perimeter-centric security, Rapid 7, security, Symmantec, Threat Emulation, Trend Micro, Tufin, URL Filtering, virtualization, vmware, vmware checkpoint vsec, VMware network virtualization, VMware network virtualization platform, VMware NSX, VMware NSX advanced security, VMware NSX advanced security policies, VMware NSX Check Point vSEC solution, vmware nsx checkpoint vsec, VMware NSX DFW, VMware NSX Distributed Firewall, VMware NSX network virtualization, VMware NSX network virtualization platform, VMware NSX Technology Partners, VMware NSX third party security products, vritualization security, vritualization security services, vSEC | Leave a comment

Hyper-Converged with Dell-VMware EVO:RAIL

Posted on May 29, 2015 by Humair

There’s a lot of interesting things going on in the industry with servers, storage, and networking: SDN (software defined networking), SDS (software defined storage), NFV (network function virtualization), SD-WAN (software defined WAN), hyper-convergence, and more and more focus on private … Continue reading →

Posted in Dell, Dell Force10, Dell-VMware EVO:RAIL, Labs, Network Architecture, Networking, Servers, Software Defined Storage (SDS), Technology, Virtualization and Cloud Computing, VMware, VMware, VMware VSAN | Tagged Dell, Dell EVO:RAIL RA, Dell EVO:RAIL Reference Architecture, Dell N4064, Dell Networking, Dell Networking Dell-EVO:RAIL RA, Dell Networking Dell-EVO:RAIL Reference Architecture, Dell Networking EVO:RAIL RA, Dell Networking EVO:RAIL Reference Architecture, Dell Networking N-series, Dell Networking N4032, Dell Networking N4064, Dell Networking S4048-ON, Dell Networking S4810, Dell Networking S4820T, Dell Networking S5000, Dell Networking S6000, Dell Networking S6000-ON, Dell Networking Z9500, Dell S4048-ON, Dell S4810, Dell S4820T, Dell S5000, Dell S6000, Dell S6000-ON, Dell VMware EVO-RAIL, Dell VMware EVO:RAIL RA, Dell VMware EVO:RAIL Reference Architecture, Dell Z9500, Dell-VMware EVO RAIL solution, Dell-VMware EVO:RAIL, Dell-VMware EVO:RAIL solution, EVO, EVO RAIL Appliance, EVO RAIL configuration, EVO-RAIL, EVO:RAIL, EVO:RAIL Appliance, EVO:RAIL cluster, EVO:RAIL configuration, EVO:RAIL management daemon, EVO:RAIL MARVIN, EVO:RAIL MARVIN daemon, EVO:RAIL Marvin Management, EVO:RAIL Reference Architecture, hyper-converged, hyper-converged infrastructure appliance, hyperconverged, IPv4 multicast, IPv6 multicast, Loudmouth, MARVIN, N-series, N4000, N4000-series, N4032, N4064, RAIL, S-series, S4048-ON, S4810, S4820T, S5000, S6000, S6000-ON, SDS, software defined storage, vCenter Server Appliance, VCSA, virtualization platform, vmware, VMware EVO:RAIL, VMware EVO:RAIL cluster, VMware EVO:RAIL configuration, VMware EVO:RAIL Reference Architecture, VMware Loudmouth, VMware vCenter Server Appliance, VMware VCSA, VMware VSAN, VSAN, VSAN Cache, VSAN storage, Z-series, Z9500, Zeroconf | Leave a comment

Dell Networking with Dell-VMware EVO:RAIL

Posted on May 24, 2015 by Humair

Checkout the Dell Networking with Dell-VMware EVO:RAIL Reference Architecture available here on Dell.com. In this white paper, I discuss the details of the network connectivity at the ToR for the Dell-VMware EVO:RAIL appliance, reference architecture and respective network configuration required, … Continue reading →

Posted in Dell, Dell Force10, Dell-VMware EVO:RAIL, Labs, Network Architecture, Networking, Servers, Storage, Virtualization and Cloud Computing, VMware, VMware, VMware VSAN | Tagged Dell, Dell EVO:RAIL RA, Dell EVO:RAIL Reference Architecture, Dell N4064, Dell Networking, Dell Networking Dell-EVO:RAIL RA, Dell Networking Dell-EVO:RAIL Reference Architecture, Dell Networking EVO:RAIL RA, Dell Networking EVO:RAIL Reference Architecture, Dell Networking N-series, Dell Networking N4032, Dell Networking N4064, Dell Networking S4048-ON, Dell Networking S4810, Dell Networking S4820T, Dell Networking S5000, Dell Networking S6000, Dell Networking S6000-ON, Dell Networking Z9500, Dell S4048-ON, Dell S4810, Dell S4820T, Dell S5000, Dell S6000, Dell S6000-ON, Dell VMware EVO-RAIL, Dell VMware EVO:RAIL RA, Dell VMware EVO:RAIL Reference Architecture, Dell Z9500, Dell-VMware EVO RAIL solution, Dell-VMware EVO:RAIL, Dell-VMware EVO:RAIL solution, EVO, EVO RAIL Appliance, EVO RAIL configuration, EVO-RAIL, EVO:RAIL, EVO:RAIL Appliance, EVO:RAIL cluster, EVO:RAIL configuration, EVO:RAIL management daemon, EVO:RAIL MARVIN, EVO:RAIL MARVIN daemon, EVO:RAIL Marvin Management, EVO:RAIL Reference Architecture, hyper-converged, hyper-converged infrastructure appliance, hyperconverged, IPv4 multicast, IPv6 multicast, Loudmouth, MARVIN, N-series, N4000, N4000-series, N4032, N4064, RAIL, S-series, S4048-ON, S4810, S4820T, S5000, S6000, S6000-ON, SDS, software defined storage, vCenter Server Appliance, VCSA, virtualization platform, vmware, VMware EVO:RAIL, VMware EVO:RAIL cluster, VMware EVO:RAIL configuration, VMware EVO:RAIL Reference Architecture, VMware Loudmouth, VMware vCenter Server Appliance, VMware VCSA, VMware VSAN, VSAN, VSAN Cache, VSAN storage, Z-series, Z9500, Zeroconf | Leave a comment

6WIND – From Data Plane Acceleration to Virtual Appliances

Posted on April 12, 2015 by Humair

6WIND is an interesting company I’ve been following for some time now, initially out of curiosity, and then out of more curiosity :-). They first started as a networking software company claiming to solve performance challenges for software defined networks … Continue reading →

Posted in 6WIND, 6WIND, Dell, Dell PowerEdge Rack Servers, Linux, Network Architecture, Networking, Operating Systems, Servers, Technology, Virtualization and Cloud Computing | Tagged 6WIND, 6WIND packet processing software, 6WIND Turbo IPsec, 6WIND Turbo Router, 6WIND Virtual Accelerator, 6WINDGate, 6WINDGate packet processing software, CPU core, CPU cores, CPU multi-core multi-processor architecture, Data Plane Acceleration, Data Plane Development Kit, Dell, Dell PowerEdge, Dell PowerEdge Server, Dell Server, DPDK, Emulex, forwarding throughput, hypervisor, Intel, Intel CPU multi-core multi-processor architecture, Intel Data Plane Development Kit, Intel DPDK, Intel Xeon, Intel Xeon processor, kernel, KVM, L3 forwarding throughput, linux, Linux kernel, Linux network stack, Linux networking stack, Linux Open vSwitch, Linux operating system, Linux OS, Linux OVS switch, Linux user space, Mellanox, multi-core multi-processor architecture, network function virtualization, network packet processing, networking software company, networking stack, NFV, Open Networking Summit, Open vSwitch, Open vSwitch Conference, OVDK, OVS, OVS switch, packet processing, packet processing software, PowerEdge, PowerEdge server, SDN, Separate Control Plane and Data Plane, software defined networking, standard Linux networking stack, TCP/IP stack, throughput, user space, Vincent Jardin, Virtual Accelerator, virtual appliance, virtual networking, virtualization, Xeon, Xeon processor, zero-copy, zero-copy mode | Leave a comment

VMware NSX Service Composer: Advanced Security & Micro-segmentation

Posted on March 16, 2015 by Humair

In a prior blog, Firewalling & Micro-segmentation with VMware NSX, I discussed some of the basics of firewalls and micro-segmentation with VMware NSX. In this blog, I’ll introduce how security groups via NSX Service Composer can be used with VMware … Continue reading →

Posted in Dell, Dell EqualLogic, Dell Force10, Dell PowerEdge Blade Servers, Dell PowerEdge Rack Servers, iSCSI, Labs, Network Architecture, Network Security, Networking, Security, Servers, Storage, Technology, Virtualization and Cloud Computing, VMware, VMware | Tagged advanced security, advanced security policies, container, converged network, DCB, Dell, Dell DCB iSCSI, Dell end-to-end converged infrastructure, Dell iSCSI, Dell MXL, Dell S4810, Dell S6000, Dell VMware NSX, Dell VMware NSX Architecture, Dell VMware NSX design, Dell VMware NSX Guide, Dell VMware NSX RA, Dell-VMware NSX Reference Architecture, dynamic membership, end-to-end converged infrastructure, ESXi, firewall, firewall rules, iSCSI, iSCSI converged network, logical switch, micro-segmentation, Micro-segmentation with VMware NSX, microsegmentation, microsegmentation with VMware NSX, MXL, NSX, NSX advanced security policies, NSX Distributed Firewall, NSX firewall, NSX firewall rules, NSX logical switch, NSX partners, NSX security group container, NSX Security Group dynamic membership, NSX Security Groups, NSX security policy, NSX service chaining, NSX Service Composer, NSX Service Composer advanced security policies, NSX Service Composer Canvas View, NSX Service Composer container, NSX Service Composer Security Group, NSX Service Composer security policy, NSX-V, Palo Alto, Palo Alto Networks, Palo Alto Panorama, Palo Alto's Panorama, Panorama, S4810, S6000, security, security group container, Security Group dynamic membership, Security Groups, security policy, service chaining, Service Composer, Service Composer advanced security policies, Service Composer Canvas View, Service Composer container, Service Composer Security Group, Service Composer security policy, symantec, virtual machines, vms, VMware achitecture, VMware design, VMware ESXi, VMware logical switch, VMware NSX, VMware NSX advanced security policies, VMware NSX architecture, VMware NSX design, VMware NSX Distributed Firewall, VMware NSX firewall rules, VMware NSX logical switch, VMware NSX partners, VMware NSX security group container, VMware NSX Security Group dynamic membership, VMware NSX Security Groups, VMware NSX security policy, VMware NSX service chaining, VMware NSX Service Composer, VMware NSX Service Composer advanced security policies, VMware NSX Service Composer Canvas View, VMware NSX Service Composer container, VMware NSX Service Composer Security Group, VMware NSX Service Composer security policy, VMware NSX-V, VMware NSX-v design, VMware NSX-vSphere design, VMware Security Groups, VMware Service Composer, VMware virtual machine, VMware VM, VMware vSphere, vSphere | Leave a comment

Security, Art of Hacking, & the Worst 2014 Security Breaches

Posted on March 1, 2015 by Humair

Security is hot; no doubt about it. Consider the fact that between 2011 and 2013, venture investors put nearly $3 billion into cyber security companies, resulting in new funding for some 300 firms (Source: Thomson Reuters). Worldwide security software revenue … Continue reading →

Posted in Business, Hacks, Labs, Linux, Network Architecture, Network Security, Networking, Operating Systems, Programming Languages, Python, Red Hat Linux Enterprise, Security, Technology, Technology, Tips, Tips & Tricks, Windows | Tagged backdoor, backdoor access, backdoor script, brute-force, cyber security, data breach, DOS, employee negligence, Experion, firewall, firewall misconfiguration, Gartner, Global Cybersecurity Spending, Goodwill industries, Goodwill Industries data breach, Goodwill industries security breach, hacked Linux, hacked pc, hacked target, hacker, hacking, Home Depot, Home Depot data breach, Home Depot security breach, host scanning, JP Morgan, JP Morgan data breach, JP Morgan security breach, linux, malicious code, malware, malware detection software, malware software, malware software detection, Michael Bruemmer, Michaels Data Breach, Michaels security breach, micro-segmentation, microsegmentation, negligence, Neiman Marcus data breach, Neiman Marcus security breach, network security, novice hackers, packet injection, perl, Point-of-sale, Point-of-sale system, Point-of-sale systems, Point-of-sales system, Point-of-sales systems, Ponemon Institute, POS, POS systems, proxy server, Python, Python client, Python hacking, Python hacks, Python server, RedHat, RedHat Linux, RedHat Linux Enterprise, security, security breach, security exploitation, security infrastructure, security perimeter, security software, sensitive information, social engineering, Sony, Sony data breach, Sony security breach, sophisticated hackers, spyware, spyware detection software, spyware software detection, SQL injection, Target, Target data breach, Target security breach, traffic sniffing, trojan, unpatched Windows, unpatched Windows flaw, vi, Visa, windows, Windows flaw | Leave a comment

Cumulus Linux: Devops and Python Scripting

Posted on February 12, 2015 by Humair

As I mentioned in a prior blog, Cumulus Linux on Dell Networking Switches, one benefit of running Cumulus Linux on network switches is that you can run your typical Linux commands that you’re used to running for also configuring and … Continue reading →

Posted in Cumulus Linux, Dell, Dell Force10, Labs, Network Architecture, Networking, Programming Languages, Python, Technology | Tagged backgroud process, chmod, continuous ping, Cumulus, Cumulus background process, Cumulus Linux, Cumulus Linux background process, Cumulus Linux on Dell Switches, Cumulus Linux on network switches, Cumulus Linux OS, Cumulus Linux swp interface, Cumulus Linux with OSPF, Cumulus OS, Dell Networking, Dell Networking S4810, Dell Networking S4810-ON, Dell Networking S6000, Dell Networking S6000-ON, Dell Open Networking, Dell Open Networking Switch, Dell S4810, Dell S4810-ON, Dell S6000, Dell S6000-ON, devops, e-mail, Gmail smtp server, Google's Gmail smtp server, Google's smtp server, import smtplib, linux, Linux Process ID, MIME, Open Networking, Open Networking Switch, open source, OSPF, Python, Python 2.7, Python e-mail, python e-mail attachment, python email, python email attachment, python gmail, python gmail email, Python ICMP, Python MIME, Python on Cumulus, Python on Cumulus Linux, Python script, Python script for monitoring, Python smtp, Python smtplib, Python subprocess, Quagga, Running Python Script in Background, S4810, S4810-ON, S6000, S6000_ON, Scripting on Cumulus, Scripting on Cumulus Linux, smtp server, smtplib, Spine-Leaf, Spine-Leaf Architecture, Spine-Leaf Architecture with OSPF, Spine-Leaf with OSPF, subprocess, swp, swp interface | 5 Comments

Cumulus Linux on Dell Switches: Spine-Leaf Architecture & OSPF on Unnumbered Interfaces

Posted on January 18, 2015 by Humair

In a prior blog, Cumulus Linux on Dell Networking Switches, I demonstrated how to install Cumulus Linux on a Dell S6000 switch and do some basic configuration. In this blog, I’ll demonstrate how to configure routing on Dell switches running … Continue reading →