Nuage Networks Technology Program Partners Overview 2016

Editor's Notes

• #3: I will keep it simple. Three items An update on the Nuage Networks Tech Partner Program An announcement related to the partner program And of course, one more thing at the end that is somewhat related
• #4: First, the update. As a networking platform, we ‘interface” with a variety of products and solutions working with a growing list of technology partners to ensure that you continue to have the best options possible.
• #5: Within the partner program, we have looked at the different categories of the solutions that we can work with And tried to identify not just market leaders, but also innovators. Fortunately, the VSP has been designed from the beginning to support any workload, any hypervisor andy any HW infrastructure We wanted to continue with that theme and felt that it is important to ensure that we work with new solutions offered by some start-ups. It is difficult to keep a partner in one box, as many of them have multiple products. Some partners such as Radware and F5 for example fit in security and ADC, but if they are a leader in that category we will make sure that we include them Another advantage of the platform, is that the solution addresses DC use-cases as well as the branch and the work that we do with one category will apply to the other (with some minor adjustments).
• #6: We started the program in 2014 with a few partners that were driven by what our customers had in their networks Covers all of our categories but our focus was on making sure that things just work
• #7: 2015 is when we started to include more services (specifically security) We also added an Mirantis As well as some innovative solutions from start-ups such as Avi and vArmour
• #8: This year has been a very busy year for us and you can see a significant increase All security vendors PAN 3 months, Fortinet 1 month , CP 2 weeks Containers, Management and Orchestration (top left) IPAM This was possible because: non-custom integration , what works with one will work with others The platform itself, because it supports all HV, all workloads, easy to work with (VSPK) (API driven)
• #10: I will share three examples of how these partnerships have grown and developed
• #11: Challenge Granular segmentation of virtual workloads Security policy enforcement tied to workload mobility Application segmentation and protection against advanced threats Joint Integration L3/L4 distributed firewall for reduces attack surface area with L4 segmentation VM-Series provides application level micro-segmentation and protection against advanced threats Benefits: Automation and correlation for reduced TCO Meet compliance mandates
• #12: [Animated Slide] The flexibility offered by the Nuage VSP allows the user to place the virtual appliances (firewall or ADC) anywhere in the network. In addition to legacy groups of “L3 domain” and “subnet” , multiple subnets can be grouped in a security zone and multiple virtual ports can be grouped into “Policy Groups” Forwarding policies (to redirect traffic to/from a firewall) can be applied to a single vport, multiple vports (policy group), a subnet, multiple subnets (zone) or a domain The selection can be very specific (specific IP address, port SRC and DST) or can be general (ANY to ANY) In addition to Forwarding policies, you can apply ACLs on the vport itself (L2-L4) There needs to be a sync mechanism between Palo Alto Networks Panorama and Nuage VSD (to sync VM information as well as Policy Group updates); this code has been jointly developed and utilizes the programmability of both platforms (REST calls) Nuage announced a VSPK (development kit) on GitHub and open sourced a lot of the code (python) Once traffic is forwarded to the virtual firewall, the
• #13: [Animated Slide] The flexibility offered by the Nuage VSP allows the user to place the virtual appliances (firewall or ADC) anywhere in the network. In addition to legacy groups of “L3 domain” and “subnet” , multiple subnets can be grouped in a security zone and multiple virtual ports can be grouped into “Policy Groups” Forwarding policies (to redirect traffic to/from a firewall) can be applied to a single vport, multiple vports (policy group), a subnet, multiple subnets (zone) or a domain The selection can be very specific (specific IP address, port SRC and DST) or can be general (ANY to ANY) In addition to Forwarding policies, you can apply ACLs on the vport itself (L2-L4) There needs to be a sync mechanism between Palo Alto Networks Panorama and Nuage VSD (to sync VM information as well as Policy Group updates); this code has been jointly developed and utilizes the programmability of both platforms (REST calls) Nuage announced a VSPK (development kit) on GitHub and open sourced a lot of the code (python) Once traffic is forwarded to the virtual firewall, the
• #14: [Animated Slide] The flexibility offered by the Nuage VSP allows the user to place the virtual appliances (firewall or ADC) anywhere in the network. In addition to legacy groups of “L3 domain” and “subnet” , multiple subnets can be grouped in a security zone and multiple virtual ports can be grouped into “Policy Groups” Forwarding policies (to redirect traffic to/from a firewall) can be applied to a single vport, multiple vports (policy group), a subnet, multiple subnets (zone) or a domain The selection can be very specific (specific IP address, port SRC and DST) or can be general (ANY to ANY) In addition to Forwarding policies, you can apply ACLs on the vport itself (L2-L4) There needs to be a sync mechanism between Palo Alto Networks Panorama and Nuage VSD (to sync VM information as well as Policy Group updates); this code has been jointly developed and utilizes the programmability of both platforms (REST calls) Nuage announced a VSPK (development kit) on GitHub and open sourced a lot of the code (python) Once traffic is forwarded to the virtual firewall, the
• #15: [Animated Slide] The flexibility offered by the Nuage VSP allows the user to place the virtual appliances (firewall or ADC) anywhere in the network. In addition to legacy groups of “L3 domain” and “subnet” , multiple subnets can be grouped in a security zone and multiple virtual ports can be grouped into “Policy Groups” Forwarding policies (to redirect traffic to/from a firewall) can be applied to a single vport, multiple vports (policy group), a subnet, multiple subnets (zone) or a domain The selection can be very specific (specific IP address, port SRC and DST) or can be general (ANY to ANY) In addition to Forwarding policies, you can apply ACLs on the vport itself (L2-L4) There needs to be a sync mechanism between Palo Alto Networks Panorama and Nuage VSD (to sync VM information as well as Policy Group updates); this code has been jointly developed and utilizes the programmability of both platforms (REST calls) Nuage announced a VSPK (development kit) on GitHub and open sourced a lot of the code (python) Once traffic is forwarded to the virtual firewall, the
• #16: [Animated Slide] The flexibility offered by the Nuage VSP allows the user to place the virtual appliances (firewall or ADC) anywhere in the network. In addition to legacy groups of “L3 domain” and “subnet” , multiple subnets can be grouped in a security zone and multiple virtual ports can be grouped into “Policy Groups” Forwarding policies (to redirect traffic to/from a firewall) can be applied to a single vport, multiple vports (policy group), a subnet, multiple subnets (zone) or a domain The selection can be very specific (specific IP address, port SRC and DST) or can be general (ANY to ANY) In addition to Forwarding policies, you can apply ACLs on the vport itself (L2-L4) There needs to be a sync mechanism between Palo Alto Networks Panorama and Nuage VSD (to sync VM information as well as Policy Group updates); this code has been jointly developed and utilizes the programmability of both platforms (REST calls) Nuage announced a VSPK (development kit) on GitHub and open sourced a lot of the code (python) Once traffic is forwarded to the virtual firewall, the
• #17: [Animated Slide] The flexibility offered by the Nuage VSP allows the user to place the virtual appliances (firewall or ADC) anywhere in the network. In addition to legacy groups of “L3 domain” and “subnet” , multiple subnets can be grouped in a security zone and multiple virtual ports can be grouped into “Policy Groups” Forwarding policies (to redirect traffic to/from a firewall) can be applied to a single vport, multiple vports (policy group), a subnet, multiple subnets (zone) or a domain The selection can be very specific (specific IP address, port SRC and DST) or can be general (ANY to ANY) In addition to Forwarding policies, you can apply ACLs on the vport itself (L2-L4) There needs to be a sync mechanism between Palo Alto Networks Panorama and Nuage VSD (to sync VM information as well as Policy Group updates); this code has been jointly developed and utilizes the programmability of both platforms (REST calls) Nuage announced a VSPK (development kit) on GitHub and open sourced a lot of the code (python) Once traffic is forwarded to the virtual firewall, the
• #19: The Nuage VSP is CMS and Hypervisor agnostic. Nuage has a plugin for Vmware vCenter, OpenStack and CloudStack. Nuage also supports KVM , XEN and ESXi This demo will utilize OpenStack OSP6, Nuage VSP 3.2 and KVM. However, the integration is not limited to this combination
• #20: The Nuage VSP is CMS and Hypervisor agnostic. Nuage has a plugin for Vmware vCenter, OpenStack and CloudStack. Nuage also supports KVM , XEN and ESXi This demo will utilize OpenStack OSP6, Nuage VSP 3.2 and KVM. However, the integration is not limited to this combination