Policy Definition and Automated Enforcement for Virtual Infrastructures

HyTrust, Inc., a provider of policy, security, and configuration management for virtualization infrastructure, announced Tuesday its HyTrust Appliance 1.5.

“Building on the success of HyTrust’s initial product launch earlier this year, the company is again delivering a solution that will help accelerate the wave of virtualization deployment that is sweeping across enterprise datacenters,” says Eric Chiu, president and CEO of HyTrust. “The policy definition and automated enforcement capabilities available in HyTrust Appliance 1.5 enable unprecedented, proactive control over the critical elements of virtualized infrastructure.”

According to a statement, HyTrust Appliance 1.5 adds to the core capabilities of HyTrust Appliance 1.0—centralized access control, template-based security configuration, and audit-quality log aggregation for the hypervisor—by delivering the first enterprise-class, object-based policy management capability, built specifically for security and compliance policy enforcement of virtual infrastructure.

David Bartoletti, senior analyst and consultant, Taneja Group, comments: “This is a slick solution. Using HyTrust, enterprises are able to centrally and cost-effectively enforce policy directly on virtual objects to ensure control and visibility. HyTrust’s automated policy management approach not only addresses the dynamic nature of virtualization but also the need for consistency, centralization, and compliance.”

The automated policy enforcement in HyTrust Appliance 1.5 specifically addresses the potentially serious security and compliance concerns associated with the portability of virtual machines. “In collaboration with HyTrust partners Cisco and VMware, we have identified a common customer request, which is to ensure that virtual machines connect only to appropriate network segments per policy,” explains Chiu. “HyTrust Appliance 1.5 automates virtual infrastructure policy enforcement to ensure that virtual machines connect to the right networks and port groups, for both Cisco Nexus 1000v and VMware Distributed Switch.”