We are ramping up another news cycle around our Nexus 1000V and cloud network services portfolio this week at Cisco live! in London. Among the updates, business security solutions vendor Imperva is demonstrating integration of its SecureSphere Web Application Firewall (WAF) into the Nexus 1000V vPath service insertion architecture. This marks the first third party product to participate in the Cisco vPath architecture, which allows virtual services to be easily inserted and chained into Cisco virtual networks and virtual overlays.
[Note: Join Cisco for a Live Announcement Webinar on Cloud Innovations on February 5: Register Here]
Regular readers of our data center and cloud blog will probably recall the importance of vPath in enabling virtual services for virtualized multi-tenant cloud environments, and for allowing policy mobility along with VM mobility. The Cisco vPath architecture currently supports our own virtual services including Virtual Security Gateway (VSG), the ASA 1000V Cloud Firewall, and virtual WAAS for WAN optimization. vPath also boosts performance of service traffic paths and orchestrates service chaining so that VM traffic is processed in a ordered chain defined by policy.
Read More »
Tags: ASA 1000V Cloud Firewall, Cloud Services Platform, Imperva, Nexus 1000v, Nexus 1110, SecureSphere, Virtual Security Gateway, vPath, Web Application Firewall
Cisco partner Imperva formally announced plans this week to deploy and host their SecureSphere Web Application Firewall (WAF) on the Nexus 1010 and 1110 Virtual Service Appliances. The SecureSphere WAF will be the first third party virtual service available on the Cisco virtual service appliances, joining Cisco virtual services such as the Virtual Security Gateway (VSG), the ASA 1000V Cloud Firewall, virtual Network Analysis Module (vNAM), Data Center Network Manager (DCNM), and the Nexus 1000V Virtual Supervisor Module (VSM).
In earlier posts, I have described how virtual services can be best deployed on a separate UCS-based appliance running NX-OS. The Nexus 1100 series are dedicated platforms for hosting virtual service nodes that run in a virtual machine, rather than taking up valuable resources on application servers, and allow for easier manageability by the networking and security teams (rather than the server team). Read More »
Tags: ASA 1000V, Cloud Firewall, Data Center Network Manager, DCNM, Imperva, Network Analysis Module, Nexus 1000v, Nexus 1100, pci, SecureSphere, UCS, Virtual Security Gateway, virtual services appliance, vsg, Web Application Firewall
There’s an incredible amount of hype and excitement these days around Software Defined Networking (SDN), which promises to herald in a new age of flexibility, business agility and automation to our existing data center and campus networks. Since there are very few, if any, SDN networks in production environments today, though, we know there are a lot of implementation details to work out before the industry achieves the lofty benefits of network programmability. Cisco opened its kimono this week on its strategy around programmable networks (an even broader concept than what we believe the traditional definition of SDN is), called Cisco Open Network Environment. (Get Omar’s take on Cisco ONE).
If you are like a lot of people, you might think that SDN is synonymous with OpenFlow, the leading standards-based approach for SDN today. However, we are already seeing folks across the industry extending the SDN vision beyond what OpenFlow is currently envisioned to do, so we think the definition of SDN will probably evolve over the next year or so to include additional programming models and protocols. Cisco ONE, for example, includes three approaches to network programmability: 1) our own onePK set of API’s to Cisco network operation systems and devices, 2) a portfolio of agents and controllers that will support OpenFlow, among other things, and 3) our Nexus 1000V-based portfolio for building virtual network overlays.
Read More »
Tags: ASA 1000V, Imperva, Nexus 1000v, onePK, Open Network Environment, OpenFlow, OpenStack, REST, SDN, software defined networks, virtual overlays, VXLAN