VMware VSHIELD APP 1.0 - API Manual de usuario descargar pdf (Pagina 67)

VMware, Inc. 67

vShieldDataSecurityprovidesvisibilityintosensitivedatastoredwithinyourorganization’svirtualizedand

cloudenvironments.BasedontheviolationsreportedbyvShieldDataSecurity,youcanensurethatsensitive

dataisadequatelyprotectedandassesscompliancewithregulationsaroundtheworld.

Thischapterincludesthefollowingtopics:

 “vShieldDataSecurityUserRoles”onpage 67

 “DefiningaDataSecurityPolicy”onpage 67

 “SavingandPublishingPolicies”onpage 71

 “DataSecurityScanning”onpage 73

 “A n a l y z i n g Results”onpage 74

TobeginusingvShieldDataSecurity,youcreateapolicythatdefinestheregulationsthatapplytodata

securityinyourorganizationandspecifiestheareasofyourenvironmentandfilestobescanned.Whenyou

startaDataSecurityscan,vShieldanalyzesthedataonthe

virtualmachinesinyourvSphereinventoryand

reportsthenumberofviolationsdetectedandthefilesthatviolatedyourpolicy.

Afteryouanalyzetheresultsofthescan,youcanedityourpolicyasrequired.Whenyoueditapolicy,you

mustenableitbypublishingthechanges.

Notethatyoucannot

installvShieldDataSecurityusingaRESTAPI.ForinformationoninstallingvShield

DataSecurity,seethevShieldQuickStartGuide.

TodeployvShieldDataSecurity,youmustinstallthelatestversionofVMwareToolsoneachvirtualmachine

thatyouwanttoscan.ThisinstallsaThinAgent,which

allowstheSVMtoscanthevirtualmachines.

vShield Data Security User Roles

Auser’sroledeterminestheactionsthattheusercanperform.Ausercanonlyhaveonerole.Youcannotadd

aroletoauser,orremoveanassignedrolefromauser,butyoucanchangetheassignedroleforauser.

Defining a Data Security Policy

Inordertodetectsensitivedatainyourenvironment,youmustcreateadatasecuritypolicy.Youmustbea

SecurityAdministratortocreatepolicies.

vShield Data Security Configuration

Table 8-1. vShield Data Security User Roles

Role Actions Allowed

Enterpriseadministrator AllvShieldoperationsandsecurity.

vShieldadministrator vShieldoperationsonly:forexample,installvirtualappliances,andconfigureportgroups.

Securityadministrator Createandpublishpolicies,viewviolationreports.Cannotstartorstopdatasecurityscans.

Auditor Viewconfiguredpoliciesandviolationreports.Read‐only.

1 2 ... 62 63 64 65 66 67 68 69 70 71 72 ... 103 104

Sin comentarios

VMware VSHIELD APP 1.0 - API Manual de usuario Pagina 67