Virtualization Security real solutions Luis Delabarre CTO Copyright

The VMware Virtualization Journey COST EFFICIENCY Stage Key Capabilities BUSINESS AGILITY IT Production Business Production ITaa. S IT IT / LOB CIO Cost Efficiency Quality of Service Sponsorship Business Value QUALITY OF SERVICE CAPEX OPEX § Cost Savings § Credibility § Provisioning CAPEX OPEX Availability Responsivenes s § Speed § Stability § SLAs CAPEX OPEX Availability Responsivenes s Compliance Time-to-market § Streamlined Processes § IT-as-a-Service § Quality of Life Proactive Selective Confidence Business Agility Reactive Copyright 2009 Trend Micro Inc.

Security Challenges Along the Virtualization Journey VMware and Trend Micro help customers address these issues, and accelerate the journey IT Production Business Production ITaa. S Data destruction 12 Multi-tenancy 11 Diminished perimeter 10 Data access & governance 9 Data confidentiality & integrity 8 Compliance / Lack of audit trail 7 Resource Contention 6 Mixed trust level VMs 5 Instant-on gaps 4 Inter-VM attacks 3 Host controls under-deployed 2 n tio ate a iz al on R u rt ti Vi op Ad Trust levels inhibit consolidation 1 Copyright 2009 Trend Micro Inc.

Next-generation virtsec solution: Key requirements 2 1 3 Inline virtual appliance: • Greater efficiency Coordinated approach: • Manageability • Optimized protection • Operational efficiency 4 Hypervisor / v. Center integration: • Enables virtualization-aware security • Eliminates instant-on gaps Copyright 2009 Trend Micro Inc. Agent-based security: • Comprehensive protection within datacenter • Mobility – to extend protection to public cloud

Deep Security modules Server & application protection 5 protection modules Deep Packet Inspection Detects and blocks known and zero-day attacks that target vulnerabilities IDS / IPS Shields web application vulnerabilities Web Application Protection Provides increased visibility into, or control over, applications accessing the network Application Control Reduces attack surface. Prevents Do. S & detects reconnaissance scans Optimizes the identification of important security events buried in log entries Firewall Integrity Monitoring Detects malicious and unauthorized changes to directories, files, registry keys… Log Inspection Anti-Virus Detects and blocks malware (web threats, viruses & worms, Trojans) Protection is delivered via Agent and/or Virtual Appliance Copyright 2009 Trend Micro Inc. 5

Deep Security Updates Classification 11/3/2020 Copyright 2009 Trend Micro Inc. 6

Deep Security Virtual Patching Copyright 2009 Trend Micro Inc.

Deep Security Architecture Trend Micro Security Admin Deep Security Manager Trend Micro Deep Security Virtual Appliance Network Security Anti-Malware - IDS/IPS - Web App Protection - Application Control - Firewall VI Admin v. Center Legend ESX 4. 1 APPs OS APPs - Real-time Scan - Scheduled & Manual Scan Kernel OS BIOS v. Shield Endpoint API VMsafe-net API v. Shield Manager Guest VM Thin Driver v. Shield Endpoint ESX Module Trend Micro filter driver v. Sphere Platform Trend Micro product components v. Shield Endpoint Components VMware Platform Copyright 2009 Trend Micro Inc. 8

Key benefits Security Operations Compliance Zero-day protection: shields vulnerabilities in web apps, enterprise apps and OSs Enables higher consolidation rates (virtualization) while reducing performance impacts Ensures compliance with PCI DSS, internal policies, & other regulations Detects & blocks a broad range of threats Patch more efficiently & cost-effectively Eliminates need & cost of multiple security agents Copyright 2009 Trend Micro Inc. Improves the efficiency of the compliance / audit process