VMware VSHIELD APP 1.0 - API Manuale Utente Scaricare il pdf (Pagina 89)

VMware, Inc. 89

vShieldDataSecurityprovidesvisibilityintosensitivedatastoredwithinyourorganization’svirtualizedand

cloudenvironments.BasedontheviolationsreportedbyvShieldDataSecurity,youcanensurethatsensitive

dataisadequatelyprotectedandassesscompliancewithregulationsaroundtheworld.

Thischapterincludesthefollowingtopics:

 “vShieldDataSecurityUserRoles”onpage 89

 “DefiningaDataSecurityPolicy”onpage 90

 “SavingandPublishingPolicies”onpage 95

 “DataSecurityScanning”onpage 96

 “QueryingScanResults”onpage 97

 “QueryingViolationDetails”onpage 101

TobeginusingvShieldDataSecurity,youcreateapolicythatdefinestheregulationsthatapplytodatasecurity

inyourorganizationandspecifiestheareasofyourenvironmentandfilestobescanned.Whenyoustarta

DataSecurityscan,vShieldanalyzesthedataon

thevirtualmachinesinyourvSphereinventoryandreports

thenumberofviolationsdetectedandthefilesthatviolatedyourpolicy.

Afteryouanalyzetheresultsofthescan,youcanedityourpolicyasrequired.Whenyoueditapolicy,you

mustenableitbypublishingthechanges.

Notethatyou

cannotinstallvShieldDataSecurityusingaRESTAPI.ForinformationoninstallingvShield

DataSecurity,seethevShieldQuickStartGuide.

TodeployvShieldDataSecurity,youmustinstallthelatestversionofVMwareToolsoneachvirtualmachine

thatyouwanttoscan.ThisinstallsaThinAgent,

whichallowstheSVMtoscanthevirtualmachines.

vShield Data Security User Roles

Auser’sroledeterminestheactionsthattheusercanperform.Ausercanonlyhaveonerole.Youcannotadd

aroletoauser,orremoveanassignedrolefromauser,butyoucanchangetheassignedroleforauser.

vShield Data Security Configuration

Table 8-1. vShield Data Security User Roles

Role Actions Allowed

Enterpriseadministrator AllvShieldoperationsandsecurity.

vShieldadministrator vShieldoperationsonly:forexample,installvirtualappliances,andconfigureportgroups.

Securityadministrator Createandpublishpolicies,viewviolationreports.Cannotstartorstopdatasecurityscans.

Auditor Viewconfiguredpoliciesandviolationreports.Read‐only.

1 2 ... 84 85 86 87 88 89 90 91 92 93 94 ... 131 132

Nessun commento

VMware VSHIELD APP 1.0 - API Manuale Utente Pagina 89