VMware NSX and vRA – "pre-approved port openings" without jeopardizing the security posture

VMware NSX and vRA – how to consume “pre-approved port openings” without jeopardizing the security posture.

Speakers:
Anders Krus, VMware
Lars Olsson, VMware

For many organisations, ordering of port openings to external networks is a highly manual and time consuming task.

In this hands-on demo, we show how the vRA consumer may order a port opening from e.g. Internet to the consumer’s deployment. We show how vRA (Aria Automation) adds the necessary firewall guardrails into NSX to avoid potential lateral movement.

In this way, port openings for certain use-cases may be pre-approved and part of the serf-service portal, and be ordered with instant effect.

Note,
This is an example on how this procedure may look like. However, every organisation is different and the set of firewall rules in NSX might vary a lot.