Networking

08:02 AM
Connect Directly
RSS
E-Mail
50%
50%

Dome9 Offers Cross-Platform Cloud Security Management Service

Start-up Dome9 Security's SaaS offering provides centrally managed, cross-platform, native security controls for cloud-based infrastructures. The hosted service provides security for public and private cloud infrastructures, as well as for dedicated and virtual private servers (VPSes).

Start-up Dome9 Security's software-as-a-service (SaaS) offering provides centrally managed, cross-platform, native security controls for cloud-based infrastructures. The hosted service provides security for public and private cloud infrastructures, as well as for dedicated and virtual private servers (VPSes).

Dome9 leverages server-based host firewalls for all server platforms, using Windows operating system firewalls and native Linux firewalls such as iptables. Agents are installed on the servers to enable management through the Dome9 Security Central interface. Alternatively, an API is used if the cloud provider utilizes virtual machine firewalls, such as Amazon Web Services, allowing control of administration of its Security Groups.

Dome9 says its service addresses a critical security gap as enterprises move from physical to cloud environments, losing perimeter-based controls. "When enterprises migrate server infrastructure to the cloud, the perimeter goes away," says Dave Meizlik, Dome9 VP of marketing. "Yet many IT folks are leaving the server ports open to be able to connect to and manage their machines."

However, management of each server’s host firewall--particularly in large, heterogeneous environments with both Windows and Linux servers--doesn’t scale well. Dome9’s service solves this problem with a centralized management portal that can present all types of servers to the admin, regardless of platform.

Enterprises can apply access policies to individual servers and groups of servers, as well as to individuals and groups. Delegated administration allows permissions to be managed based on admin privilege. While access permission is controlled through Dome9’s portal, users authenticate and gain access directly to the server. The problem of shared accounts is eliminated as all access permission is controlled through Dome9.

Access controls are very granular, based on user and group profiles. So, for example, users can be given time-based permissions on a regular basis or through one-time "invitations." In this way, organizations can tightly control access to, for example, contractors and partners, as well as to employees.

Security policies and configurations "follow" VM servers as they are spun up and migrate in a dynamic cloud environment. Account- and server-level visibility and logging allow enterprises to monitor user activity and provide an audit trail for compliance. The pay-as-you-go service starts at $20 per server per month.

See more on this topic by subscribing to Network Computing Pro Reports Strategy: Malware Analysis (subscription required).

Comment  | 
Print  | 
More Insights
Slideshows
Cartoon
Audio Interviews
Archived Audio Interviews
Jeremy Schulman, founder of Schprockits, a network automation startup operating in stealth mode, joins us to explore whether networking professionals all need to learn programming in order to remain employed.
White Papers
Register for Network Computing Newsletters
Current Issue
2014 Private Cloud Survey
2014 Private Cloud Survey
Respondents are on a roll: 53% brought their private clouds from concept to production in less than one year, and 60% ­extend their clouds across multiple datacenters. But expertise is scarce, with 51% saying acquiring skilled employees is a roadblock.
Video
Twitter Feed