The virtualisation arena has been boosted by the launch of Sourcefire's RNA.
In the same week that the company announced a Technology Alliance Partnership with VMWare, the RNA has been launched which can identify both physical systems and new VMware-based virtual machines as they are added to the network.
The RNA offers detection capability and enables customers to easily identify and monitor virtual machines, addressing the growing concern over VM sprawl.
Dominic Storey, Sourcefire's technical director, said: “virtualisation is a very powerful thing, we are now seeing people using it at home and in the office as it is easy to start up and get running.
Despite this, it is very easy to copy and the challenge is in the people who are responsible for it are often network and not security people, and if you take security out of the loop no one can be balanced and mistakes can be made.
“Virtualisation can be running on a virtual system and on the same system as the source code, so yes it is secure, but it is only a piece of software and the system is connected by a virtual switch. So if someone wanted to get into it and hack it they could, but on the other side nine out of ten security errors are because people make mistakes.
“With VM Sprawl, a feature that is added to intrusion is the ability to recognise the vendor's address, we will be able to see the virtual machines and whether it has an encoded address, so we can raise an alert if any of the VM numbers change. As it is done in real time the moment a machine appears that should not be there I can lock it before any damage is done.”
Mike Montecillo, Security and Risk Management Analyst at Enterprise Management Associates, said: “Enterprises need to have real-time visibility into these systems if they want to ensure that they are properly managed and protected.
By offering customers a single solution for providing visibility into both physical and virtual environments, Sourcefire RNA is increasing security, while also addressing critical management issues, like VM Sprawl.”
See original article on scmagazineus.com
Sourcefire launch real time virtualisation monitoring tool
By Dan Raywood on Sep 22, 2008 9:57AM