Catbird has updated its virtual security software platform to allow organizations to track virtual machines as they move and ensure security policies are continuously enforced.
Its new product, VMShield 2.0, includes technology the company refers to as V-Tracker, which works by assigning a unique identifier to each virtual machine.
“This identifier combines the usual attributes of the machine – e.g., MAC address – plus other proprietary attributes that Catbird determines through the Hypervisor APIs and our own network monitoring,” said Michael Berman, CTO of Catbird. “This tracking enables not only simply following a machine through vMotion but also through other less-well behaved – and probably security breaching – virtual machine mobility events.”
In combination with Catbird’s TrustZones policy enforcer, virtual machines can stay monitored and protected via the Catbird Command Center, which validates and enforces policies for all VMs within a given TrustZone, Catbird officials explained. Non-compliant assets are immediately shut down by Catbird’s automated quarantine mechanism.
VMShield 2.0 also provides intelligent packet filtering and deep packet inspection to detect suspect communication with VMs anywhere on the network or to ferret out contact with external risks such as malware and botnet command-and-control centers. The tracking capabilities may also help organizations deal with issues such as virtual sprawl.
“It takes more than a firewall to secure virtual infrastructure,” said Rachel Chalmers, an analyst with The 451 Group, in a statement. “Configuration errors can expose sensitive data. Unwitting mistakes on the part of well-meaning employees can leave organizations exposed. Products like VMshield can validate configuration and enforce security policies even as virtualization is changing the game.”
VMShield 2.0 with V-Tracker utilizes hypervisor APIs to be VM-aware and is designed for compatibility with VMware, Citrix Xenserver and Microsoft Hyper-V.