Dell EMC Azure Stack Hybrid Cloud Solution

Dell EMC have announced their Microsoft Azure Stack hybrid cloud platform solutions. This announcement builds upon earlier statements of support and intention by Dell EMC to be part of the Microsoft Azure Stack community. For those of you who are not familiar, Azure Stack is an on premise extension of Microsoft Azure public cloud.

What this means is that essentially you can have the Microsoft Azure experience (or a subset of it) in your own data center or data infrastructure, enabling cloud experiences and abilities at your own pace, your own way with control. Learn more about Microsoft Azure Stack including my experiences with and installing Technique Preview 3 (TP3) here.

What Is Azure Stack

Microsoft Azure Stack is an on-premise (e.g. in your own data center) private (or hybrid when connected to Azure) cloud platform. Currently Azure Stack is in Technical Preview 3 (e.g. TP3) and available as a proof of concept (POC) download from Microsoft. You can use Azure Stack TP3 as a POC for learning, demonstrating and trying features among other activities. Here is link to a Microsoft Video providing an overview of Azure Stack, and here is a good summary of roadmap, licensing and related items.

In summary, Microsoft Azure Stack and this announcement is about:

• A onsite, on-premise,  in your data center extension of Microsoft  Azure public cloud
• Enabling private and hybrid  cloud with good integration along with shared  experiences with Azure
• Adopt, deploy, leverage cloud on your terms and timeline  choosing what works best for you
• Common processes,  tools, interfaces, management and user experiences
• Leverage speed of  deployment and configuration with a purpose-built integrated  solution
• Support existing and cloud-native  Windows, Linux, Container and other services
• Available as a public preview via software download, as well  as vendors offering solutions

What Did Dell EMC Announce

Dell EMC announced their initial  product, platform solutions, and services  for Azure Stack. This includes a Proof of  Concept (PoC) starter kit (PE R630) for doing evaluations, prototype, training,  development test, DevOp and other initial activities with Azure Stack. Dell EMC also announced a larger for production  deployment, or large-scale development, test DevOp activity turnkey solution. The  initial production solution scales from 4 to 12 nodes, or from 80 to 336 cores  that include hardware (server compute, memory, I/O and networking, top of rack  (TOR) switches, management, Azure Stack software along with services.  Other aspects of the announcement include initial  services in support of Microsoft Azure Stack and Azure cloud offerings.

Image via Dell EMC

The announcement builds on joint Dell EMC Microsoft  experience, partnerships, technologies and services spanning hardware,  software, on site data center and public cloud.

Image via Dell EMC

Dell EMC along with Microsoft have engineered a hybrid cloud  platform for organizations to modernize  their data infrastructures enabling faster innovate, accelerate deployment of resources. Includes hardware  (server compute, memory, I/O networking, storage devices), software, services, and support.

Image via Dell EMC

The value proposition  of Dell EMC hybrid cloud for Microsoft Azure Stack includes consistent  experience for developers and IT data infrastructure professionals. Common experience across Azure public cloud and Azure  Stack on-premise in your data center for private or hybrid. This  includes common portal, Powershell,  DevOps tools, Azure Resource Manager (ARM), Azure Infrastructure as a Service  (IaaS) and Platform as a Service (PaaS), Cloud Infrastructure and associated  experiences (management, provisioning, services).

Image via Dell EMC

Secure, protect, preserve and serve applications VMs hosted  on Azure Stack with Dell EMC services along with Microsoft technologies. Dell  EMC data protection including backup and restore, Encryption as a Service, host  guard and protected VMs, AD integration among other features.

Image via Dell EMC

Dell EMC services for Microsoft Azure Stack include single contact support for prepare, assessment, planning; deploy with rack  integration, delivery, configuration;  extend the platform with applicable migration,  integration with Office 365 and other applications,  build new services.

Image via Dell EMC

Dell EMC Hyper-converged scale out solutions range from minimum of 4 x PowerEdge R730XD (total raw specs include 80 cores (4 x 20), 1TB RAM (4 x 256GB), 12.8TB SSD Cache, 192TB Storage, plus two top of row network switches (Dell EMC) and 1U management server node. Initial maximum configuration raw specification includes 12 x R730XD (total 336 cores), 6TB memory, 86TB SSD cache, 900TB storage along with TOR network switch and management server.

The above configurations initially enable HCI nodes of small (low) 20 cores, 256GB memory, 5.7TB SSD cache, 40TB storage; mid size 24 cores, 384GB memory, 11.5TB cache and 60TB storage; high-capacity with 28 cores, 512GB memory, 11.5TB cache and 80TB storage per node.
 
Image via Dell EMC

Dell EMC Evaluator program for Microsoft Azure Stack including the PE R630 for PoCs, development, test and training environments. The solution combines Microsoft Azure Stack software, Dell EMC server with Intel E5-2630 (10 cores, 20 threads / logical processors or LPs), or Intel E5-2650 (12 cores, 24 threads / LPs). Memory is 128GB or 256GB, storage includes flash SSD (2 x 480GB SAS) and HDD (6 x 1TB SAS). and networking.

Image via Dell EMC

Collaborative support single contact between Microsoft and Dell EMC

Who Is This For

This announcement is  for any organization that is looking for an  on-premise, in your data center private or hybrid cloud turnkey solution  stack. This initial set of announcements can be for those looking to do a proof  of concept (PoC), advanced prototype,  support development test, DevOp or gain cloud-like elasticity, ease of use, rapid procurement and other experiences of public  cloud, on your terms and timeline. Naturally,  there is a strong affinity and seamless experience for those already using, or  planning to use Azure Public Cloud for Windows,  Linux, Containers and other workloads, applications,  and services.

What Does This Cost

Check with your Dell EMC representative  or partner for exact pricing which  varies for the size and configurations.  There are also various licensing models to take into consideration if you have Microsoft Enterprise  License Agreements (ELAs) that your Dell EMC representative  or business partner can address for you. Likewise being cloud based, there is also time usage-based  options to explore.

Where to learn more

• Dell EMC announce Microsoft Hybrid Cloud Azure Stack (Dell EMC)
• Dell EMC Cloud for Microsoft Azure Stack (Dell EMC)
• Dell EMC Cloud for Microsoft Azure Stack Data Sheet (Dell EMC PDF)
• Dell EMC Cloud Chats (Dell EMC Blog)
• Technical Preview (get the bits aka software download here)
• Frequently asked questions for Azure Stack (Microsoft)
• Microsoft AzureStack forum
• Dell EMC announce Microsoft Azure Stack solution
• Azure Stack Technical Preview 3 (TP3) Overview Preview Review
• Azure Stack TP3 Overview Preview Review Part II
• Gaining Server Storage I/O Insight into Microsoft Windows Server 2016
• Overview Review of Microsoft ReFS (Reliable File System) and resource links
• Via WServerNews.com Cloud (Microsoft Azure) storage considerations
• Via CloudComputingAdmin.com Cloud Storage Decision Making: Using Microsoft Azure for cloud storage
• www.thenvmeplace.com, www.thessdplace.com, www.objectstoragecenter.com and www.storageio.com/converge

What this  all means

The dust is starting to settle on last falls Dell EMC  integration, both of whom have long histories working with, and partnering  along with Microsoft on legacy, as well as virtual software-defined data centers (SDDC), software-defined data infrastructures  (SDDI), native, and hybrid clouds. Some may view the Dell EMC VMware relationship as a primary  focus, however, keep in mind that both Dell and EMC had worked with Microsoft long before VMware came into being. Likewise, Microsoft remains one of the most commonly  deployed operating systems on VMware-based  environments. Granted Dell EMC have a significant  focus on VMware, they both also sell, service and support many services for Microsoft-based solutions.

What about Cisco, HPE, Lenovo among others who have to announce or discussed their Microsoft  Azure Stack intentions? Good question, until we hear more about what those and  others are doing or planning, there is  not much more to do or discuss beyond speculating  for now. Another common question is if there is demand  for private and hybrid cloud, in fact,  some industry expert pundits have even said private,  or hybrid are dead which is interesting, how can something be dead if it is  just getting started. Likewise, it is  early to tell if Azure Stack will gain traction with various organizations,  some of whom may have tried or struggled with OpenStack among others.

Given a large number  of Microsoft Windows-based servers on VMware, OpenStack, Public cloud services  as well as other platforms, along with continued growing popularity of Azure,  having a solution such as Azure Stack provides an attractive option for many environments. That leads to the question  of if Azure Stack is essentially a replacement for Windows Servers or Hyper-V  and if only for Windows guest operating systems. At this point indeed, Windows  would be an attractive and comfortable option, however, given a large number  of Linux-based guests running on Hyper-V  as well as Azure Public, those are also primary candidates as are containers  and other services.

Overall, this is an excellent  and exciting move for both Microsoft  extending their public cloud software stack to be  deployed within data centers in a hybrid way, something that those  customers are familiar with doing. This  is a good example of hybrid being spanning public and private clouds, remote  and on-premise, as well as familiarity  and control of traditional procurement with the flexibility, elasticity experience  of clouds.

Some will say that if OpenStack is struggling in many organizations  and being free open source, how Microsoft can have success with Azure Stack.  The answer could be that some organizations  have struggled with OpenStack while others have not due to lack of commercial  services and turnkey support. Having installed both OpenStack and Azure Stack  (as well as VMware among others), Azure Stack is at least the TP3 PoC is easy  to install, granted it is limited to one node,  unlike the production versions. Likewise,  there are easy to use appliance versions of OpenStack that are limited in  scale, as well as more involved installs that unlock full functionality.

OpenStack, Azure Stack, VMware and others have their places,  along, or supporting containers along with other tools. In some cases,  those technologies may exist in the same environment supporting different  workloads, as well as accessing various public clouds, after all, Hybrid is the  home run for many if not most legality IT environments.

Overall this is a good announcement from Dell EMC for those who are interested in, or should become more aware about Microsoft Azure Stack, Cloud along with hybrid clouds. Likewise look forward to hearing more about the solutions from others who will be supporting Azure Stack as well as other hybrid (and Virtual Private Clouds).

Ok, nuff said (for now...).

Cheers
Gs

Broadcom aka Avago aka LSI announces SAS SATA NVMe Adapters with RAID

In case you missed it, Broadcom formerly known as Avago who bought the LSI adapter and RAID card business announced shipping new SAS, SATA and NVMe devices.

While SAS and SATA are well established continuing to be deployed for both HDD as well as flash SSD, NVMe continues to evolve with a bright future. Likewise, while there is a focus on software-defined storage (SDS), software defined data centers (SDDC) and software defined data infrastructures (SDDI) along with advanced parity RAID including erasure codes, object storage among other technologies, there is still a need for adapter cards including traditional RAID.

Keep in mind that while probably not meeting the definition of some software-defined aficionados, the many different variations, permutations along with derivatives of RAID from mirror and replication to basic parity to advanced erasure codes (some based on Reed Solomon aka RAID 2) rely on software. Granted, some of that software is run on regular primary server processors, some on packaged in silicon via ASICs or FPGAs, or System on Chips (SOC), RAID on Chip (RoC) as well as BIOS, firmware, drivers as well as management tools.

For some environments cards such as those announced by Broadcom are used in passthru mode effectively as adapters for attaching SAS, SATA and NVMe storage devices to servers. Those servers may be deployed as converged infrastructures (CI), hyper-converged infrastructures (HCI), Cluster or Cloud in Box (CiB) among other variations. To name names you might find the above (or in the not so distant future) in VMware vSAN or regular vSphere based environments, Microsoft Windows Server, Storage Spaces Direct (S2D) or Azure Stack, OpenStack among other deployments (check your vendors Hardware Compatibility Lists aka HCLs). In some cases these cards may be adapters in passthru mode, or using their RAID (support various by different software stacks). Meanwhile in other environments, the more traditional RAID features are still used spanning Windows to Linux among others.

Who Is Broadcom?

Some of you may know of Broadcom having been around for many years with a focus on networking related technologies. However some may not realize that Avago bought Broadcom and changed their name to Broadcom. Here is a history that includes more recent acquisitions such as Brocade, PLX, Emulex as well as LSI. Some of you may recall Avago buying LSI (the SAS, SATA, PCIe HBA, RAID and components) business not sold to NetApp as part of Engenio. Also recall that Avago sold the LSI flash SSD business unit to Seagate a couple of years ago as part of its streamlining. That's how we get to where we are at today with Broadcom aka formerly known as Avago who bought the LSI adapter and RAID business announcing new SAS, SATA, NVMe cards.

What Was Announced?

Broadcom has announced cards that are multi-protocol supporting Serial Attached SCSI (SAS), SATA/AHCI as well as NVM Express (NVMe) as basic adapters for attaching storage (HDD, SSD, storage systems) along with optional RAID as well as cache support. These cards can be used in application servers for traditional, as well as virtualized SDDC environments, as well as storage systems or appliances for software-defined storage among other uses. The basic functionality of these cards is to provide high performance (IOPs and other activity, as well as bandwidth) along with low latency combined with data protection as well as dense connectivity.

Specific features include:

• Broadcom’s Tri-Mode SerDes Technology enables  the operation of NVMe, SAS or SATA devices in a single drive bay, allowing for  endless design flexibility.
• Management software including LSI Storage Authority (LSA), StorCLI, HII  (UEFI)
• Optional CacheVault(R) flash cache protection
• Physical dimension Low Profile 6.127” x 2.712”
• Host bus type x8 lane PCIe Express 3.1
• Data transfer rates SAS-3 12Gbs; NVMe up to 8 GT/s PCIe Gen 3
• Various OS and hypervisors host platform support
• Warranty 3 yrs, free 5x8 phone support, advanced replacement option
• RAID levels 0, 1, 5, 6, 10, 50, and 60

Note that some of the specific feature functionality may be available at a later date, check with your preferred vendors HCL

In case you need a refresher on SFF cable types, click on the following two images which take you to Amazon.com where you can learn more, as well as order various cable options. PC Pit Stop has a good selection of cables (See other SFF types), connectors and other accessories that I have used, along with those from Amazon.com and others.

Left: SFF 8644 Mini SAS HD (External), Right SFF-8643 Mini SAS HD (internal) Image via Amazon.com

Left: SFF 8643 Mini SAS HD (Internal), Right SFF-8642 SATA with power (internal) Image via Amazon.com

Wait, Doesnt NVMe use PCIe

For those who are not familiar with NVMe and in particular U.2 aka SFF 8639 based devices, physically they look the same (almost) as a SAS device connector. The slight variation is if you look at a SAS drive, there is a small tab to prevent plugging into a SATA port (recall you can plug SATA into SAS. For SAS drives that tab is blank, however on the NVMe 8639 aka U.2 drives (below left) that tab has several connectors which are PCIe x4 (single or dual path).

What this means is that the PCIe x4 bus electrical signals are transferred via a connector, to backplane chassis to 8639 drive slot to the drive. Those same 8639 drive slots can also have a SAS SATA connection using their traditional connectors enabling a converged or hybrid drive slot so to speak. Learn more about NVMe here (If the Answer is NVMe, then what were and are the questions?) as well as at www.thenvmeplace.com.

Left NVMe U.2 drive showing PCIe x4 connectors, right, NVMe U.2 8639 connector

Who Is This For?

These cards are applicable for general purpose IT and other data infrastructure environments in traditional servers among others uses. They are also applicable for systems builders, integrators and OEMs whom you may be buying your current systems from, or future ones.

Where to  Learn More

The following are additional resources to learn more about vSAN and related technologies.

• Read the Broadcom announcement here
• SSD, flash, Non-volatile memory (NVM) storage Trends, Tips & Topics
• Get in the NVMe SSD game (if you are not already) with Intel 750 among others
• InfoStor – SSD Trends, Tips and Topics
• Server and Storage I/O Benchmarking and Performance Resources
• If the Answer is NVMe, then what were and are the questions?
• Announcing SAS SANs for Dummies book, LSI edition
• Thessdplace.com and Thenvmeplace.com
• Server StorageIO CI and HCI microsite landing page www.storageio.com/converge

What this  all means

Even as the industry continues to talk and move towards more software-defined focus, even for environments that are serverless, there is still need for hardware somewhere. These adapters are a good sign of the continued maturing cycle of NVMe to be well positioned into the next decade and beyond, while also being relevant today. Likewise, even though the future involves NVMe, there is a still a place for SAS along with SATA to coexist in many environments. For some environment there is a need for traditional RAID while for others simply the need for attachment of SAS, SATA and NVMe devices. Overall, a good set of updates, enhancements and new technology for today and tomorrow, now, when do I get some to play with? ;).

Ok, nuff said (for now...).

Cheers
Gs

NSX Manager のデータ バックアップは、FTP もしくは SFTP サーバに取得できます。

Back Up NSX Manager Data

たとえば、下記のように Linux サーバを簡易的なバックアップ先とすることもできます。

NSX-v の簡易バックアップサーバ (SFTP) を Linux で用意する。

ただ、NSX Manager のバックアップは自動削除されません。

下記のように、取得したバックアップ ファイルはひたすら残ります。

※これは NSX 6.3.1 の NSX Manager の画面です。

この「Backup History」に表示されているバックアップは、

バックアップ先でファイルを削除すれば、Web UI 側からも表示されなくなります。

そこで、Linux の cron を使用してバックアップをクリーンアップしてみます。

今回は、以前の投稿（下記）の環境で実施しています。

NSX-v の簡易バックアップサーバ (SFTP) を Linux で用意する。

1回の NSX Manager のバックアップでは、

バックアップ先に指定したフォルダ配下に、下記のような２つのファイルセットが作成されます。

＜Backup Directory＞/＜Backup Prefix＞＜タイムスタンプ＞.backupproperties

＜Backup Directory＞/＜Backup Prefix＞＜タイムスタンプ＞

具体的には、下記のような感じのファイル名になります。

/home/nsx-bk-user01/nsxmgr01-17_10_00_Sun18Jun2017.backupproperties

/home/nsx-bk-user01/nsxmgr01-17_10_00_Sun18Jun2017

これらのバックアップ ファイルを、cron で定期的に自動削除します。

今回は、下記のような corn 定義ファイルを作成してみました。

1行だけ記載した /etc/cron.d/nsx-backup-cleanup ファイルを新規作成しています。

内容は下記のような感じです。

• 毎時 15分に自動実行。
  NSX Manager を毎時10分にバックアップ取得するように設定しているので、その少し後。
• nsx-bk-user01 ユーザで実行。
  SFTP 接続用として作成したユーザにあわせて。root などでもよい。
• 今回は 3世代のバックアップファイルを残す。
  世代数をわかりやすくするため、あえて GEN=3 と指定してみた。
• バックアップファイル名は、NSX Manager の「Backup Directory」と「Backup Prefix」
  に合わせて「/home/nsx-bk-user01/nsxmgr01-」。
• ls コマンドで、タイムスタンプ順にバックアップファイルをリスト。
  そして「残す世代数 * 1回のバックアップセット（2つ）」 以降のファイルを
  tail コマンドで取得して、xargs コマンドで削除（rm）する。

[root@nsx-work ~]# cat /etc/cron.d/nsx-backup-cleanup

15 * * * * nsx-bk-user01 GEN=3; ls -t /home/nsx-bk-user01/nsxmgr01-* | tail -n +`expr $GEN \* 2 + 1` | xargs rm

この cron ファイルを作成して、自動実行されるのを待つと、
下記のような感じで ３世代分のファイルだけ残して、他のバックアップ ファイルは削除されます。

[root@nsx-work ~]# ls -t /home/nsx-bk-user01/nsxmgr01-*

/home/nsx-bk-user01/nsxmgr01-17_10_00_Sun18Jun2017.backupproperties

/home/nsx-bk-user01/nsxmgr01-17_10_00_Sun18Jun2017

/home/nsx-bk-user01/nsxmgr01-16_10_00_Sun18Jun2017.backupproperties

/home/nsx-bk-user01/nsxmgr01-16_10_00_Sun18Jun2017

/home/nsx-bk-user01/nsxmgr01-15_10_00_Sun18Jun2017.backupproperties

/home/nsx-bk-user01/nsxmgr01-15_10_00_Sun18Jun2017

[root@nsx-work ~]#

NSX Manager から見える Backup History も、３世代分だけになっています。

このような感じで、バックアップ先のファイルを削除すれば、
NSX Manger から見たバックアップ履歴も削除されます。

ただ、ファイル削除はしっかり検証 / 動作確認したうえで実装してもらえればと思います。

以上、NSX Manager のデータ バックアップのクリーンアップをしてみる話でした。

This issue occurs if the hostd is not aware of the dynamic rule when auto-deploy attempts to check host compliance after applying the host profile. As a result, the compliance check fails if the host profile contains the dynamic rule set

Actulally this issue occurred 5.5 but I saw it is also exist in 6.0 and solution is same.

See Also

Recently we have upgraded our vRealize 6.2 to 6.6 and by this post I am sharing the step by step procedure of doing the up-gradation.

Look wise it is love at first sight and functionality wise it is limitless, its outstanding.

The upgrade process of vRealize Operations is consists of two steps in series.

• Part # 1 - Operating System Upgrade
• Part # 2 - Product Upgrade

But amazingly it is very easy!From single vRealize Operations Admin Console both steps will be performed. You just need to download the products from VMware Download Portal.Download both as shown below.

• vRealize Operations Manager - Virtual Appliance Upgrade
• vRealize Operations Manager - Virtual Appliance Operating System Upgrade

Once you have downloaded the files, you will get below *.pak files which we need during up-gradation.

• vRealize_Operations_Manager-VA-OS-6.6.0.5707160.pak (Use this file for Phase 1 up-gradation)
• vRealize_Operations_Manager-VA-6.6.0.5707160.pak (Use this file for Phase 2 up-gradation)

Now let's move to up-gradation part.

• Take the Cluster offline. Click on Take Offline.
• Once Cluster is Offline, Click on the Software Update under Administration Panel.
• Go to the Software Update Panel and Click on Install a Software Update.

• Select the OS Upgrade PAK file(vRealize_Operations_Manager-VA-OS-6.6.0.5707160.pak) that you downloaded.

• Click on Upload.

• After the Upload completes, Click on Next.

• Accept EULA and Click on Next.
• Installation is in Progress now. It will take some time and redirect you to vRO Admin Interface. In between it automatically reboot the appliance.

• Enter Admin Credentials and Login to Admin Interface.

• Wait when an upgrade is completed. It will take some time to complete the OS Update.
• Once OS update will be complete, Cluster status will be in Online state.
• Now OS Upgrade has been completed. Now move to Phase 2 to upgrade Virtual Appliance.

Phase # 2 - Upgrade Virtual Appliance

• Go to Administration Panel and Click on Software Update.
• Click on Install a Software Update in right side.

• Select the Virtual Appliance PAK file(vRealize_Operations_Manager-VA-6.6.0.5707160.pak) that you downloaded.

• Click on Upload

• After the Upload completes, Click on Next.

• Accept the EULA and Click on Next.
• Installation is in Progress now. It will take some time and redirect you to vRO Admin Interface. In between it automatically reboot the appliance.

• Now look at the new Management Interface of vRealize Operations Manager 6.6. With new features in hand, it also changed the look and feel. Anyway, let's complete this then we will explore these all things.
• Provide Admin Credentials and login to Admin Interface console.

• Wait when an upgrade is completed. It will take some time to complete the Virtual Appliance Update.
• Once VA update will be complete, Cluster status will be in Online state.

• Installation is still in progress with different status. We need patience here. It's all about to complete.

• Here we have Cluster Status is in Online State.
• Up-gradation of vRealize Operations Manager from 6.2 to 6.6 has been Successfully Completed. Now jump in to User Interface.

• To access vRO User Interface, we need to usehttps://<vRO_IPAddress>/ui/login
• Provide credential and enjoy new version of Operation Manager with lot of enhancements.

Thanks--

Please Visit My Blog Site - Https://vmwars.wordpress.com for another wonderful stuff.

-Harjit Singh

When user is trying to browse storage (data store/device) through web-client getting error

I worked with VMware , support opened internal PR with engineering team and provided solution as

Per development they've root caused the issue. The fix will be included in vCenter 6.0 patch 6. The release of this fix is early Q4 this year.

The fix will also be in the next releases of 5.5 and 6.5 as well.

NSX for vSphere の 分散ファイアウォール（DFW）のログは、ESXi に出力されます。

DFW の作用している様子を、ESXi の Syslog を受け取る vRealize Log Insight（vRLI）を利用して

確認してみてみようと思います。

vRLI で NSX の DFW によるパケット ドロップの様子を確認してみます。

今回は、使用している製品と構成状態を説明しておきます。

製品とバージョンについて。

この一連の投稿で利用している製品と、そのバージョンは下記です。

• vCenter Server 6.5d
• ESXi 6.5d
• NSX for vSphere 6.3.1
• vRealize Log Insight 4.5

構成状態について。

NSX 環境で利用する ESXi は 3台あります。

すでに NSX コンポーネントをインストール済みで、DFW が有効になっています。

vRLI のバージョンは 4.5 です。

vRLI は 1 VM だけですが仮想 IP を構成しています。

この環境では以前のバージョンから利用している都合で仮想 IP を使用していますが、

NSX と vRLI を連携させるうえで 仮想 IP が必須というわけではありません。

この環境では、FQDN を DNS サーバに登録して名前解決できるようにしてあります。

ESXi の Syslog 転送も設定済みです。

vRLI の「管理」画面の「vSphere 統合」にある、登録済みの vCenter Server の「詳細表示」から・・・

ESXi のログを vRLI に転送するように設定ずみであることがわかります。

ESXi の「システムの詳細設定」を見ると、

Syslog 転送先として vRLI のアドレスが指定されていることが確認できます。

vRLI の「管理」→「ホスト」を確認すると「過去 5 分以内」に

ESXi 3台のログが受信できていることがわかります。

ログに含まれるホスト名や、名前解決の都合などにより、

同一ホストのホスト名が FQDN とショートネームで検知されています。

NSX のダッシュボードを利用するためのコンテンツパックは、

すでにインストール済みです。

まだインストールされていない場合も、vRLI のこの Web UI を表示している端末が

インターネット接続できているようであれば、この「マーケット プレイス」画面からインストールできます。

つづく・・・

vRealize Log Insight で NSX DFW の Drop を確認してみる。Part.2

NSX for vSphere の 分散ファイアウォール（DFW）の様子を、

vRealize Log Insight（vRLI）を利用してみてみようと思います。

前回は、製品構成を説明しました。

vRealize Log Insight で NSX DFW の Drop を確認してみる。Part.1

今回は、実際に見てみる環境の概要を説明しておこうと思います。

ネットワーク構成と VM 配置。

下記のような簡易的なネットワーク環境を構成しました。

DFW が作用する通信を発生させるため、2台の Linux VM を

アクセス元 VM「vm01」と、アクセス先 VM「ext-vm01」として用意しました。

• ext-vm01 (IP： 192.168.1.223)  ※Web サーバ
• vm01（IP： 10.1.10.101）
• 実際は他にも何台か VM あり。

DFW 環境内から外部の Web サーバ（Yum や GitHub なども）にアクセスするようなケースもあるかなと思い、

アクセス先の ext-vm01 では、Web サーバを起動してみました。

ちなみに、ext-vm01 の Web サーバはただ nginx の Docker コンテナを起動しているだけです。

root@ext-vm01 [ ~ ]# ip a show eth0 | grep inet -m 1

  inet 192.168.1.223/24 brd 192.168.1.255 scope global dynamic eth0

root@ext-vm01 [ ~ ]# cat /etc/photon-release

VMware Photon Linux 1.0

PHOTON_BUILD_NUMBER=62c543d

root@ext-vm01 [ ~ ]# systemctl start docker

root@ext-vm01 [ ~ ]# docker run -d -p 80:80 nginx

Unable to find image 'nginx:latest' locally

latest: Pulling from library/nginx

e6e142a99202: Pull complete

8c317a037432: Pull complete

af2ddac66ed0: Pull complete

Digest: sha256:72c7191585e9b79cde433c89955547685db00f3a8595a750339549f6acef7702

Status: Downloaded newer image for nginx:latest

925d315458f74068fba33a907e33e4690c448b25646cad585a9f4a766109f842

root@ext-vm01 [ ~ ]#

コンテンツも、ただ Welcome ページが置かれているだけです。

root@ext-vm01 [ ~ ]# curl -s 192.168.1.223:80 | head -n 4

<!DOCTYPE html>

<html>

<head>

<title>Welcome to nginx!</title>

通信経路と、利用するファイアウォール機能。

今回は、すでに vm01 と ext-vm01 が相互に通信可能になるようにルーティングしてある状態です。

NSX で利用できるファイアウォールは、2種類あります。

NSX Edge Service Gateway（ESG）の Edge Firewall

• ESG の VM がもつファイアウォール機能。
• ESXi は関与せず、ESG がファイアウォール仮想アプライアンスとして動作する。

分散ファイアウォール（DFW）

• ESXi の VMkernel がもつファイアウォール機能。
• DFW を有効にしているクラスタで起動する VM の vNIC で作用する。

どちらも vSphere Web Client の NSX 管理画面（Network and Security）から

設定変更することができます。

両方同時に利用することも、片方だけ利用することも可能です。

今回は、Edge Firewall は特に使用せず、DFW だけ扱います。

ちなみに、ESXi がもつ ESXi Firewall もありますが、これは VMkernel の通信を制御するもので、

基本的に VM の通信には作用しないファイアウォールです。

DFW は、VM の vNIC で作用するファイアウォールなので、

ファイアウォールの動作（許可や拒否など）は、ESXi のログとして出力することが可能です。

ESXi はこのログを Syslog 転送することが可能なので、Log Insight に転送して分析 / 可視化することができます。

つづく・・・

vRealize Log Insight で NSX DFW の Drop を確認してみる。Part.3

NSX for vSphere の 分散ファイアウォール（DFW）の様子を、

vRealize Log Insight（vRLI）を利用してみてみます。

この投稿での利用製品と構成状態について。

vRealize Log Insight で NSX DFW の Drop を確認してみる。Part.1

この投稿の環境について。

vRealize Log Insight で NSX DFW の Drop を確認してみる。Part.2

それでは、vRLI で、DFW のログを見てみます。

DFW ルールでの、ログ出力の有効化。

まず DFW のファイアウォール ルールで、通信が Drop されたときにログが出力されるよう設定します。

この環境では デフォルト ルールを「ブロック」にしていて、明示的に通信を許可するルールを設定しない限り

このルールで通信が遮断されるようになっています。

そこで、この「デフォルト ルール」を編集して、Drop したときに「ログに記録」するようにしておきます。

まず「デフォルト ルール」の「操作」列のあたりで、編集ボタンをクリックします。

デフォルトでは「ログに記録しない」になっているので、「ログに記録」に設定変更します。

通信を発生させる。

Drop のログを出力するため、意図的に Drop される通信を発生させます。

今回は、vm01 （IP は 10.1.10.101）から ext-vm01（IP は 192.168.1.223）に、

curl で Web サーバ（TCP 80 番ポート）宛の通信を発生させてみます。

期待どおり、通信できない状態です。

root@vm01 [ ~ ]# ip a show eth0 | grep inet -m 1

    inet 10.1.10.101/24 brd 10.1.10.255 scope global dynamic eth0

root@vm01 [ ~ ]# curl 192.168.1.223:80

curl: (7) Failed to connect to 192.168.1.223 port 80: Connection timed out

vRLI ダッシュボードでのログ確認。

vRLI には NSX for vSphere のコンテンツパックをインストール済みなので、

「VMware NSX-vSphere」というダッシュボードが利用可能になっています。

まず、「Distributed Firewall - Overview」ダッシュボードを見てみます。

ログが転送される前には何も表示されませんが・・・

DFW 関連のログを受信すると、表示されます。

意図的に発生させた、通信が Drop されたログを受信できています。

デフォルト ルールで Drop されているので、ルール ID 1001 のカウントも上がっています。

「Distributed Firewall - Traffic」ダッシュボードでは、

「Firewall application ports denied」80 番ポート宛の通信が Drop されていそうなことが見られます。

一緒に 別の VM の NTP 通信（123 番ポート）も遮断されている様子が見えます。

ダッシュボードにはフィルタも設置されているので、

「vmw_nsx_firewall_src」で、通信元 IP アドレスを指定してフィルタリングしてみました。

「Firewall top sources」が指定した IP「10.1.10.101」のみに絞られ、

そこから 192.168.1.223 宛の 80 番ポートが DFW で遮断されていることが明確にわかります。

インタラクティブ分析 でのログ テキストの表示。

表示されているチャートにある「インタラクティブ分析 で開く」というボタンをクリックすると・・・

ダッシュボードのチャート表示で使用されていたフィルタ設定で、

インタラクティブ分析 画面に移動できます。

ここで、分析のもとになっている実ログのテキストを見ることができるので、

Drop を示すログ テキスト自体を確認することが可能です。

DFW 環境で期待どおり通信許可できているか（Drop されていないか）を

このようにダッシュボードや IP アドレスをもとにした検索から調査することができます。

個々の ESXi に直接ログインしてログ確認をするより便利ではないかと思います。

続く。

vRealize Log Insight で NSX DFW の Drop を確認してみる。Part.4

これまでの投稿にひき続き、NSX for vSphere の 分散ファイアウォール（DFW）の様子を、

vRealize Log Insight（vRLI）を利用して見てみます。

これまでで Drop のログを見てみたので、今回は DFW で通信が許可される様子を見てみようと思います。

ただし、システム負荷への考慮などにより、通常はファイアウォールの通信許可ログを定常取得することは少ないと思います。

ここでは DFW の様子見を目的として、あえて許可ルールのログを有効にしています。

この投稿での利用製品バージョンや環境については下記をご覧ください。

vRealize Log Insight で NSX DFW の Drop を確認してみる。Part.1

vRealize Log Insight で NSX DFW の Drop を確認してみる。Part.2

vRealize Log Insight で NSX DFW の Drop を確認してみる。Part.3

テスト用の通信を発生させる。

まず意図的に、現状だと Drop される通信を発生させます。

前回同様、curl で vm01（10.1.10.101）から ext-vm01（192.168.1.223）の 80 番ポートへひたすらアクセスします。

そして、期待どおり DFW により通信できない状態です。

root@vm01 [ ~ ]# while :; do curl --connect-timeout 1 192.168.1.223:80; sleep 2; done

curl: (28) Connection timed out after 1001 milliseconds

curl: (28) Connection timed out after 1001 milliseconds

curl: (28) Connection timed out after 1001 milliseconds

curl: (28) Connection timed out after 1001 milliseconds

（以下略・・・）

ただ、許可ルールが適用されると標準出力が多くなるので、

コマンドラインは下記のような感じでもよいかもしれません。

root@vm01 [ ~ ]# while :; do curl -s --connect-timeout 1 192.168.1.223:80; sleep 2; done > /dev/null

vRLI ダッシュ―ボードの準備。

vRLI のダッシュボードを見てみます。

まず 「Distributed Firewall - Traffic」ダッシュボードです。

• 10.1.10101 から
• 192.168.1.223 への
• （TCP の）80 番ポート 宛

の通信が Drop されている様子がわかります。

そして、「Distributed Firewall - Overview」ダッシュボードを見ます。

ずっと curl を実行しているので、「Firewall actions」チャートで drop 一定量あがり続けています。

ここで、右上のボタンで「プレゼンテーション モード」を開始しておきます。

プレゼンテーション モード がオンになりました。

画面がリアルタイム更新されるので、ここで DFW のルールが反映される様子を見てみます。

DFW での許可ルール追加。

vSphere Web Client で、vm01（10.1.10.101）→ ext-vm01（192.168.1.223）への、

HTTP サービス（TCP 80 番）を許可するルールを追加します。

今回は、ルール ID 1094 でルールが作成されました。

作成したルールの「操作」列の編集ボタンをクリックして・・・

あえて許可ルールで通信がとおったログを出力するため、

「ログに記録」を選択・保存したうえで「変更の発行」をクリックします。

許可ルールがは適用されて、vm01 で実行している curl で HTML が取得できるようになりました。

vRLI のダッシュボードでは「Firewall audit events y operation」チャートで、

DFW の設定変更をした「save configuration」のカウントがあがったタイミングから通信が通過するようになり、

「Firewall actions」チャートで DFW による drop が pass に置き換わった様子が分かります。

そして、追加した許可ルールである ルール ID 1094 がヒットするようになりました。

そしてインタラクティブ分析を開いてみると・・・

ESXi から転送されてきた、DFW が PASS を示す実ログ テキストを見ることができます。

通信が通過できているときも、DFW が作用していることが可視化されています。

DFW ルールのログ出力を停止する。

DFW に追加したルール ID 1094 を「ログに記録しない」に戻して・・・

「変更の発行」をすると、このルールは有効のまま、ログは ESXi  に出力されなくなります。

そのため vRLI にも、このルールにかかわる pass のログは転送されなくなります。

vRLI のダッシュボードを見ると、

2度目の「save configuration」があがったタイミング以降、

pass についてのログが出力されなくなった様子がわかります。

※途中で pass ログが途切れているのは、一時的に curl コマンドを止めて再実行したためです。

このように、vRLI で DFW の作用する様子を見ることができます。

つぎは、pass ログに注目してみます。

vRealize Log Insight と NSX DFW で通信の様子を可視化してみる。Part.1

FROM THE EDITORS VIRTUAL DESK
Hi everyone, welcome to the weekly TAM newsletter. This week a quick reminder regarding VMUG and upcoming events and conferences. We have a section specifically for the VMUG below and from time to time also include any important VMUG related details. This week a reminder of the upcoming Virtual Event 6.0 which will be held on the 8th of June. This promises to be an amazing event and one you should definitely attend. This year Chris Wolf, VP & CTO, Global Field and Industry at VMware will provide the Keynote at this event. I will be sure to provide more updates in the newsletter as we get closer to this event.

I wish you a fantastic week, please enjoy this week's newsletter.

Virtually Yours
VMware TAM Team
Latest News | Twitter | Facebook | LinkedIn | Blog | Newsletter | Archive
-
TAM BLOG | TAM WEBCASTS |
(Kelly Dare) | (Michelle Kaiser) |

VMUG (Jodi Shely)
VMUG is excited to feature the newly-created EUC Explore: Empower the Digital Workspace experience during four unique events this year.  EUC Explore was created to connect IT professionals, who use or have interest in EUC solutions, to industry experts from VMware, EUC vendors, and community members. Several sessions containing technical deep-dives are available on the EUC products released by VMware. Learn architecture and implementation best practices from worldwide industry experts and global practice leads. For more information visit www.vmug.com/Attend/EUC

Also a great blog post about it here!
http://tcwd.net/vblog/2017/05/11/boston-and-new-york-and-more-oh-my-vmug-euc-explore-is-here/

Full Webcasts List

NEWS AND DEVELOPMENTS FROM VMWARE
Beta Launch of docs.vmware.com
Today we are pleased to announce the beta launch of the docs.vmware.com site. This portal unifies the product documentation for all products, versions, and languages into a single site so you can find the information that you are looking for more quickly. VMware products offer a wide range of bus...

Catch a Glimpse of Zero-Touch vSphere Auto Deploy Clusters from Tomorrow
If you have ever wanted to deploy stateless VMware vSphere clusters without human intervention, then a new utility that we recently released through VMware Flings program may be of interest. The Host Profiles CLI Fling offers a preview of a new workflow for stateless hosts leveraging Auto Deploy ...

VMware Sponsors Social Innovation at SF Hacks
By Jackie Rees, Xplorer Senior Manager at VMware On Saturday March 18th, several hundred students from Northern California gathered at San Francisco State University to participate in the first ever SF Hacks event. SF Hacks is San Francisco State University’s 24-hour college hackathon where 350 s...

New KB articles published for week ending 6th May 2017
VMware vRealize Automation vRealize Automation 7.2 installation fails on the IaaS database Date Published: 2017/05/02 Migration from vRealize Automation 6.x to 7.x can fail with the error Date Published: 2017/05/03 VMware vRealize Operations Manager Touch Screen Compatibility in vRealize Operatio...

VMworld 2017 Oracle Customer Bootcamps
VMworld 2017 Oracle Customer Bootcamps On a mission to arm yourself with the latest knowledge and skills needed to master application virtualization? VMworld Customer bootcamps can get you in shape to lead the virtualization charge in your organization, with Instructor-led demos and In-depth cour...

Faster Time-To-Value and Improved Quality, Voyages-SNCF.com Goes Hybrid with OVH and vCloud Air Network
For Voyages-SNCF.com , agility is everything. So when they needed an agile, hybrid infrastructure to tackle peak online volume times they turned to OVH and the VMware vCloud® Air™ Network.   Voyages-sncf.com is the number one seller of European rail tickets.   Voyages, a subsidiary of SNCF the Fr...

3 Ways Organizations Use NSX for Application Continuity
Five example customers using NSX to enable application continuity for their business No one looks forward to data center outages. Not the business leaders who fear revenue loss from applications being down, nor the heroic IT admin whose pager is going off at 3:00 AM. Therefore many critical data ...

Capturing the Flag for Cloud IaaS Performance with VMware’s vSphere 6.5 and VIO 3.1 on Dell PowerEdge Servers
This week SPEC has published a new SPEC CloudTM IaaS 2016 result for a private cloud configuration built using VMware vSphere 6.5 and VMware Integrated OpenStack 3.1 (VIO 3.1) and Dell PowerEdge Servers. Working with VMware, Dell has pushed their lead in cloud performance even further. This time,...

Partner Spotlight: From Stagehand to Star Player, How the Hybrid Cloud Is Putting IT in the Limelight (And What You Should Do About It)
Gone are the days of IT hiding in backroom storage closets. Today, IT is taking center stage. Thanks to the surge of cloud and platform-based solutions , enterprise IT is now a critical area of focus for every industry. For those departments that manage IT, this sudden rise to fame has brought wi...

SAP HANA on VMware vSphere, Multi-VM Support Status as of May 2017
Since my last SAP HANA blog in February, our SAP HANA validation and engineering team was busy performing the remaining validation test on the Intel Broadwell platform. Because of the positive results, SAP granted us Multi-SAP HANA VM and NUMA node sharing support for vSphere 6.0 and 6.5 on the 4...

What Happens at Dell EMC World—Gets Shared in Top Mobile News!
VMware, Dell and you. Minimize user downtime. Reduce admin overhead. Align with compliance and IT security policies. That’s how you win with our big Dell EMC World announcement: The integration of VMware AirWatch and Dell Client Command systems management tools. Get all the details here on the ev...

Horizon Cloud Service with On-Premises Infrastructure May 2017 Release Updates
There are several technical updates this quarter to VMware Horizon Cloud Service with On-Premises Infrastructure . For more details on this release, see the Horizon Cloud with On-Premises Infrastructure Release Notes . Support for Cloud-Based Workspace ONE With this release, we now support cloud-...

Google’s New OS, Win10 VR Tech & Breaking VDI Product News
Also in top tech news this week: smarter Chromebook management, Android in the enterprise, separating work/personal and more. Peekaboo, I see … the new Google OS. Top Tech News shared their first impressions following a sneak peek of Google’s new operating system (OS) “Fuchsia.” Writer Jeff Cozza...

3BD/2BA with Security & Simplicity: TCAD Streamlines with VMware Digital Workspace Solutions
Home of the University of Texas at Austin, a number of growing companies and almost as many great barbecue joints, Travis County, Texas is one of the fastest growing areas in the U.S. The entity that determines property taxes there, Travis County Central Appraisal District (TCAD), has seen its wo...

VMware AirWatch 9.1: Your Top 12 Questions Answered
Our recent VMware AirWatch 9.1 webinar explored new capabilities introduced in our most recent release. Thank you to everyone who was able to join us for the live event. If you were not able to join live, check out the replay here . Due to time constraints, we did not get to all of your questions...

Dell & VMware Extend PC Management to the Firmware
Greetings from #DellEMCWorld in Las Vegas, where all of the Dell Technologies brands have come together on one stage. These are not only exciting times for us, but also for our mutual customers embarking on their digital transformation journey. Customers are now seeing the collective strength of ...

Introducing Dell EMC VDI Complete Solutions
Fast. Easy. New VDI Complete all-in-one desktop and virtualization bundles, powered by VMware Horizon, include everything you need started for $8/user/month. We hear you. Certain VDI projects can be complicated and may stall or never even get off the ground. Selling a business case with upfront c...

VMware & Google Extend Partnership to Accelerate Adoption of Chromebooks
Today at Dell EMC World 2017, VMware announced an expanded partnership with Google to accelerate the adoption of Chromebooks. The partnership enhances the existing application accessibility of the devices. VMware Workspace ONE will enable one-click secure authentication and management of applicat...

New Android Enterprise Enrollment Flows
The latest release of the VMware AirWatch admin console – AirWatch v9.1 – boasts impressive new Android enterprise enrollment flows. While new functionality is always exciting, evaluating all of the options can be a bit confusing and overwhelming. What’s an admin to do? Today’s post uses a “Wizar...

Bring Android to Work with the Latest Enhancements
We’ve received lots of feedback since VMware AirWatch announced support for Android in the enterprise (formerly called Android for Work ) in early 2015. Administrators love the ability to standardize management across any Android device. End users love the separation between work and personal app...

EXTERNAL NEWS FROM 3RD PARTY BLOGGERS
vSAN 6.6 Config Assist incorrectly reports Physical NIC warning with LACP/LAG
A very short post simply to bring an issue to your attention which a number of folks have pinged me about this week. With vSAN 6.6, there is a new feature called Configuration Assistant. As the name implies, it tries to highlight possible configuration issues with your vSAN infrastructure. A numb...

Latest Fling from VMware Labs - Host Profiles CLI
The Host Profiles CLI Fling (hostprofilescli) is a command-line utility that allows vSphere administrators to perform several operations with Host Profiles that are either not currently possible through existing user interfaces, or possible only through graphical interfaces. The hostprofilescli u...

Project USB to SDDC - Part 3
OK, the wait is finally over! In this final article, we will now walk through the process of getting access to this project as well as how to get this deployed in your own environment. For those that just want to see the code, you can find it at the Github project below: Github Project: https://g...

Cloning and Snapshots on vSAN when policy requirements cannot be met
I was looking into some behavior recently to assist one of our partners. He described a situation that they observed during proof-of-concept testing. I thought it would be of benefit to highlight this behavior in case you also observe it, and you are curious as to why it is happening. Let’s begin...

Upcoming training courses
If you are interested in joining me at a VMware vRealize Operations Manager [6.2] - Install Configure and Manage or VMware vSphere Optimize and Scale [6.5] training course in Utrecht (the Netherlands), I've got two great oppertunities for you: I still have a few seats left in this awesome vRealiz...

Updated Nested ESXi 6.0u3 & 6.5d Virtual Appliances
I finally found a bit of "extra" spare time to update my Nested ESXi Virtual Appliances to support some of the recent releases of ESXi, 6.0 Update 3 and 6.5d, which enables customers to easily and quickly deploy vSAN 6.6 in their environment for testing, development or learning purposes. If you h...

Using AzureRM and Rubrik PowerShell Modules to Consume Azure Blob Storage
It’s no secret that I enjoy tinkering around with PowerShell to automate “all the things” and generally make life easier for those in the community. During the 5th Annual PowerShell and DevOps Global Summit (that’s a mouthful, eh?) earlier this year, I was introduced to the AzureRM module for Pow...

Dell EMC World 2017: ScaleIO 3.0!
I want you, dear reader, to stop and pay close attention.  I’ve said it before, I will say it again: SDS and HCI architectural approaches are now ready for the majority of x86 workloads.   There is a sustained space for external purpose built storage platforms (think SAN, NAS, Object appliances) ...

Change multicast address when running multiple vSAN clusters in same VLAN
Advertise here with BSA Before vSAN 6.6 we would always recommend to change the multicast address when running multiple vSAN clusters in the same VLAN. Now that with vSAN 6.6 we removed multicast, does this best practice/recommendation still apply? I went looking for a clear statement but couldn’...

Dell EMC World 2017: Ready Node-a-palooza!
Our Dell EMC Ready Node program is cooking with gas.   The most well known, and most popular Ready Node is the VMware vSAN Ready Node program, but there are ScaleIO Ready Nodes (a very popular choice), and here at Dell EMC World – we’re announcing the new Microsoft Storage Spaces Direct Ready Nod...

Open vSwitch Day at OpenStack Summit 2017
This is a “liveblog” (not quite live, but you get the idea) of the Open vSwitch Open Source Day happening at the OpenStack Summit in Boston. Summaries of each of the presentations are included below. Kubernetes and OVN on Windows The first session was led by Cloudbase Solutions, a company out of ...

Fluffy Cloudy Amazon Web Services Thoughts (Part N of N)
Disclaimer : I’m not an AWS Expert. I’m learning. I regard myself as a novice. Therefore I reserve the right to make idiotic statements now, which I will later retract. My thoughts on AWS are very much a work in progress. So please don’t beat me up if you don’t agree with me. I’m just as like to ...

Auditing & Automating Disabled Protocols (TLS/SSLv3) for ESXi 6.0u3 & 6.5 using PowerCLI
A couple of weeks back, I had received a question from one of our TAMs in regards to automating the disablement of specific TLS/SSL protocols for their ESXi 6.0 Update 3 hosts. As of vSphere 6.0 Update 3 and vSphere 6.5, customers now have the ability to completely disable TLS 1.0, TLS 1.1 and SS...

Dell EMC World 2017: VDI Complete–Ready Bundle!
First – what are Ready Bundles?  Ready Nodes, Ready Bundles, Ready Systems is the taxonomy we use for our program where we bring multiple technology pieces together at Dell EMC.   Ready Nodes = software + server; Ready Bundles = software + servers/network/storage; Ready Systems = software + CI/HC...

Dell EMC World 2017: RedHat Ready Bundle Update!
The week before Dell EMC World we released a critical update to the Dell EMC RedHat Ready Bundle – and while many eyes are on Las Vegas, it will figure prominently at the OpenStack Summit occuring in Boston. First – I don’t want to bury the lead: if you’re deploying the RedHat Cloud stack – with ...

Dell EMC World 2017: Azure Stack Update!
I’m really interested to see what Microsoft and Dell EMC can do together around Azure Stack. I won’t bury the lead: the Dell EMC Cloud for Microsoft Azure Stack is the the easy button for customers looking for the on-premise peer to Azure.   It has common APIs, common semantics, common data servi...

Latest Fling from VMware Labs - vCenter Cluster Performance Tool
vCenter Cluster Performance Tool is a Powershell script that uses vSphere PowerCLI to obtain performance data for a cluster by aggregating information from individual hosts. You have the following options to specify in the script. An “interval” of 20s or 300s. The default is 20s, and corresponds ...

Liveblog: OpenStack Summit Keynote, Day 2
This is a liveblog of the day 2 keynote of the OpenStack Summit in Boston, MA. (I wasn’t able to liveblog yesterday’s keynote due to a schedule conflict.) It looks as if today’s keynote will have an impressive collection of speakers from a variety of companies, and—judging from the number of lapt...

Liveblog: Kuryr Project Update
This is a liveblog of an OpenStack Summit session providing an update on the Kuryr project. The speakers are Antoni Segura Puimedon and Irena Berezovsky. Kuryr, if you recall, was a project aimed at making OpenStack Neutron functionality available to Docker containers; it has since expanded to al...

Liveblog: Deploying Containerized OpenStack: Challenges & Tools Comparison
This is a liveblog for an OpenStack Summit session on containerized OpenStack and a comparison of the tools used for containerized OpenStack. The speaker is Jaivish Kothari, from NEC Technologies. Two other speakers were listed on the title slide, but were apparently unable to make it to the Summ...

Liveblog: AT&T’s Container Strategy and OpenStack’s Role in it
This is a liveblog of the OpenStack Summit session titled “AT&T’s Container Strategy and OpenStack’s Role in it”. The speakers are Kandan Kathirvel and Amit Tank, both from AT&T. I really wanted to sit in on Martin Casado’s presentation next door (happening at the same time), but as much as I lov...

VMware {code} Briefing: What’s New with VMware PowerCLI 6.5.1
VMware PowerCLI 6.5.1 was released on April 20th and it contained some significant improvements and changes! Whether you’re an occasional PowerCLI user or a power user, you’re not going to want to miss this special briefing! https://blogs.vmware.com/code/2017/05/05/vmware-code-briefing-whats-new-...

Dell EMC World 2017: VxRack FLEX Updates!
We’re seeing a ton of growth and demand around VxRack FLEX.  As a reminder – VxRack FLEX can be described in a single sentence: “If you want an insanely scalable and flexible HCI Rack-Scale system, with hypervisor of choice or bare metal… one that can start small and scale out - VxRack FLEX is fo...

Dell EMC World 2017: Cloud FLEX–I can’t believe we’re doing this!
Seriously, there’s a part of me that doesn’t believe what we’re doing here.   I think it’s ballsy, but I also think it’s awesome.   We could seriously disrupt our business, the industry – that could be good, bad… or GREAT.  I like that we’re playing for all the marbles :-) Michael Dell challenged...

Dell EMC World 2017: XC Series Updates!
There are a lot of eyeballs on this topic – within Dell EMC, within Nutanix, within our partner community, and most importantly – within our customer base. So – let me speak plainly: “Dell EMC XC Series and our Nutanix partnership is here to stay”. Now, I don’t want people to read in too much, or...

Dell EMC World 2017: VxRail and VxRack SDDC Updates!
The team that works on VxRail and VxRack SDDC have a simple mission – to be the ultimate, most turnkey manifestation of the VMware SDDC stack – including the SDS layer for VxRail, and the SDS and SDN layer for VxRack SDDC. They aren’t just “VMware aligned” – they are one team, led by a single cle...

Dell EMC World 2017: Get Ready for Blog-a-palooza.
There are a barrage of Virtual Geek posts that will come out today, Tuesday and Wednesday – and as usual, they will be long, detailed, meandering with lots of sidebars and detours – but hopefully interesting, my dear readers ;-) That said – I did a post on Direct 2 Dell today that because unlike ...

VMware NSX Technology Overview with Ray Budavari
Ray Budavari, Senior Staff Technical Product Manager, NSBU at VMware, gives a brief technical overview as NSX as a solution. He reviews the idea in NSX of treating the hypervisor as the network edge, and builds upon that by explaining the security and network management features that are put as c...

Using a Makefile with Markdown Documents
It’s no secret that I’m a big fan of using Markdown (specifically, MultiMarkdown ) for the vast majority of all the text-based content that I create. Over the last few years, I’ve created used various tools and created scripts to help “reduce the friction” involved with outputting Markdown source...
May 8, 2017 12:00:00 AM

DISCLAIMER
While I do my best to publish unbiased information specifically related to VMware solutions there is always the possibility of blog posts that are unrelated, competitive or potentially conflicting that may creep into the newsletter. I apologize for this in advance if I offend anyone and do my best to ensure this does not happen. Please get in touch if you feel any inappropriate material has been published. All information in this newsletter is copyright of the original author. If you are an author and wish to no longer be used in this newsletter please get in touch.

FROM THE EDITORS VIRTUAL DESK
Hi everyone, another fantastic week of VMware news. A quick reminder to please join our Social Media channels (FB and Twitter links below). We send out our latest news on a regular basis on these channels and want to ensure you are included. We will also have special announcements and competitions during VMworld so get involved in our channels now.

We have a new TAM Blog Post for you this week - Reducing Risk in your Enterprise with NSX. There is also lots of news on the VMUG front with the Virtual Event 6.0 conference. The agenda has now been posted here.

I wish you all a fantastic week ahead and hope that you enjoy this weeks newsletter.

Virtually Yours
VMware TAM Team
Latest News | Twitter | Facebook | LinkedIn | Blog | Newsletter | Archive
-
TAM BLOG | TAM WEBCASTS |
(Kelly Dare) | (Michelle Kaiser) |

VMUG (Jodi Shely)
Full Webcasts List

NEWS AND DEVELOPMENTS FROM VMWARE
What does the new culture of technology look like?
Nicola Acutt, Vice President, Sustainability Strategy – Office of the CTO at VMware If you want a glimpse into what the future of technology could look like — and be wowed by the possibilities — you’d have to go back to the Women Who Code (WWCode) premier developer conference, CONNECT 2017, which...

New KB articles published for week ending 13th May 2017
VMware ESXi Duplicate SCSI IDs are seen when running the nhpsa driver on Gen 9 HPE Synergy compute modules with an SATA drive in bay 1 of a D3940 Storage Module Published Date: 2017/05/10 VMware NSX for vSphere Managing NSX Edge from vCloud Director fails after upgrading vCNS 5.5.3 to NSX for vSp...

vSphere 6.5 Upgrade Considerations Part-1
The release of vSphere 6.5 in November 2016 introduced many new features and enhancements. These include the vCenter Server Appliance (VCSA) now becoming the default deployment. vCenter Server native high availability, which protects vCenter Server from application failure. Built-in File-Based ba...

Beta Launch of docs.vmware.com
Today we are pleased to announce the beta launch of the docs.vmware.com site. This portal unifies the product documentation for all products, versions, and languages into a single site so you can find the information that you are looking for more quickly. VMware products offer a wide range of bus...

Catch a Glimpse of Zero-Touch vSphere Auto Deploy Clusters from Tomorrow
If you have ever wanted to deploy stateless VMware vSphere clusters without human intervention, then a new utility that we recently released through VMware Flings program may be of interest. The Host Profiles CLI Fling offers a preview of a new workflow for stateless hosts leveraging Auto Deploy ...

New VMware Security Advisory VMSA-2017-0009
Today VMware has released the following new security advisory: “ VMSA-2017-0009 – VMware Workstation update addresses multiple security issues ” This documents an important severity insecure library loading issue via ALSA sound driver configuration files ( CVE-2017-4915 ) and a moderate severity ...

A Guide to Self-Service Deployment with vRealize Automation
Another month and another edition of vCloud Architecture Toolkit for Service Providers (vCAT-SP). Every month we publish a new article in our ongoing series detailing the many exciting use cases of the VMware vCloud Solution and help you take full advantage of the superior cloud solutions found i...

Use a Zero Trust Approach to Protect Against WannaCry
Micro-segmentation with VMware NSX compartmentalizes the data center to contain the lateral spread of ransomware attacks such as WannaCry On May 12 2017, reports began to appear of the WannaCry malware attacking organizations worldwide in one of the largest ransomware cyber incidents to date. The...

Oracle Database Performance on vSphere 6.5 Monster Virtual Machines
We have just published a new whitepaper on the performance of Oracle databases on vSphere 6.5 monster virtual machines. We took a look at the performance of the largest virtual machines possible on the previous four generations of four-socket Intel-based servers. The results show how performance ...

Hybrid Cloud for Australian Government: Virtualisation and Security with VMware NSX
By Akhil Verma, Originally published by Macquarie Government .   Virtualisation technology and cloud services are making it easier for Government agencies to implement their Digital Transformation strategy. Data-centre virtualisation adoption is on the way up. So is the use of software-defined da...

Enabling the Software-Defined Branch with NSX
Reimagining the edge While the importance of the cloud is obvious to anyone, the increasing importance of the edge is often overlooked. As digitization and the Internet of Things are leading to an exponential growth in the number of devices, the amount of data that is being generated by sensors i...

This Week’s Top EUC News Will Blow Your Mind
Never miss an announcement. Get top end-user computing (EUC) news in your inbox every Friday. Sign up to the right. “Microsoft Azure users now have access to genuine desktop as a service solution.” That’s SiliconANGLE on our huge news this week: We’re delivering VMware Horizon Cloud on Microsoft ...

Coming Soon: VMware Horizon Virtualization Pack for Skype for Business GA Release
As a follow up to our previous announcement on VMware Horizon with Skype for Business, we are happy to share that we will be releasing the generally available (GA) version of the VMware Horizon Virtualization Pack for Skype for Business next month. The upcoming release of the Horizon Virtualizati...

IT Empire Strikes Back, New iPad Pro Rumors & the App-teligent Digital Workspace
The IT empire strikes back. Shadow IT strikes again, but this time IT can do something to stop the rebel forces of consumerization. Skycure’s Brian Duckering talks about how the combination of mobile threat defense and unified endpoint management can result in the ceasefire we’ve all been waiting...

Fusion 8.5.7 Now available with Windows 10 Creators Update support
Team Fusion is proud to announce the availability of VMware Fusion 8.5.7 . A free update for existing users, this release contains bug fixes and adds improved support for the upcoming Windows 10 Creators Update . We also resolved an issue when using git to perform a ‘git clone’ from within virtua...

VMware User Environment Manager 9.2 Technical Deep Dive
We are excited about the newest release of VMware User Environment Manager – version 9.2. This release includes some great new features that enhance the product functionality and continue to offer administrators more flexibility in managing the user experience. We have put together a series of vi...

Introducing VMware User Environment Manager 9.2 with Privilege Elevation
I know you’re excited to hear about all the functions and features we’ve crammed into the new release. Bear with me a moment, because not everyone is aware of what VMware User Environment Manager is. What Is User Environment Manager? The easiest way to understand User Environment Manager is to im...

Securing Enterprise Mobility after Shadow IT Strikes
By Brian Duckering, Marketing and Strategy Executive, Skycure For years now, your IT and security admins debated proper methods, tools and policies to mobilize your enterprise. While these official discussions dragged on, your users unofficially started using their mobile devices (#ShadowIT) for ...

Get Ready for VMware Horizon Cloud on Microsoft Azure
Businesses today are increasingly mobile, globally distributed and fast paced. While this increasingly diverse workforce expects a consumer-simple interface for accessing work data and applications, IT faces the same challenge as before: securing the enterprise. The number one question facing org...

NEW WHITEPAPER: VMware AirWatch Product Provisioning Microsoft Office 2016 for macOS Best Practices
The VMware AirWatch Product Provisioning Office 2016 for macOS document is now available! This white paper provides configuration best practices for provisioning Microsoft Office 2016 for macOS. VMware AirWatch product features that can help you Using easy-to-follow steps and screenshots, it walk...

VMware Acquires Apteligent: Analytics for the Digital Workspace
End-to-End Performance Management from Mobile Devices to Infrastructure Across Private and Public Clouds Organizations are increasingly building mobile and cloud applications as part of their digital transformation journey. As they embrace these applications to conduct business and perform missio...

What Happens at Dell EMC World—Gets Shared in Top Mobile News!
VMware, Dell and you. Minimize user downtime. Reduce admin overhead. Align with compliance and IT security policies. That’s how you win with our big Dell EMC World announcement: The integration of VMware AirWatch and Dell Client Command systems management tools. Get all the details here on the ev...

Horizon Cloud Service with On-Premises Infrastructure May 2017 Release Updates
There are several technical updates this quarter to VMware Horizon Cloud Service with On-Premises Infrastructure . For more details on this release, see the Horizon Cloud with On-Premises Infrastructure Release Notes . Support for Cloud-Based Workspace ONE With this release, we now support cloud-...

Google’s New OS, Win10 VR Tech & Breaking VDI Product News
Also in top tech news this week: smarter Chromebook management, Android in the enterprise, separating work/personal and more. Peekaboo, I see … the new Google OS. Top Tech News shared their first impressions following a sneak peek of Google’s new operating system (OS) “Fuchsia.” Writer Jeff Cozza...


EXTERNAL NEWS FROM 3RD PARTY BLOGGERS
Oracle Monster Virtual Machine Performance on vSphere 6.5
The ability to run extremely large virtual machines on vSphere 6.5 aligns closely with the needs of large databases in the enterprise today. Specifically, Oracle database instances in some cases require large amounts of RAM, many processors, and high-speed flash-based storage to achieve the perfo...

vSAN 6.6 Stretched Cluster Demo
Advertise here with BSA I had one more demo to finish and share and that is the vSAN 6.6 stretched cluster demo. I already did a stretched clustering demo when we initially released it, but with the enhanced functionality around local protection I figured I would re-record it. In this demo (~12 m...

Configure vRealize Automation to use Platform Services Controller as External Identity Provider
I was doing some research on an inquiry that I had received from a customer who was interested in configuring their vRealize Automation (vRA) instance to use vCenter's Platform Services Controller (PSC) as an External Identity Provider (IDP) rather than the default VMware Identity Manager (vIDM) ...

VMware User Environment Manager 9.2 Technical Overview
This brief technical-overview video will introduce you to User Environment Manager 9.2, provide some details about how it works, and examine the architecture. If you are new to the product, or want a short refresher, this is a great place to begin.

Embracing APIs and Network Automation at Interop ITX 2017
Not too long ago, Ethan Banks and I recorded an episode of Datanauts entitled The Current State Of Network Automation & Telemetry with special guest Ryan Booth . If you haven’t heard this show (gasp!) I basically get the rundown on how challenging it is to programmatically control most currently ...

Image management with VIC and Harbor
In this post, I wanted to play a little more with our registry product (Harbor) and how it integrated with vSphere Integrated Containers (VIC). The workflow that I am going to show you in this post is using Docker on MAC to pull an image from the docker hub, do whatever I need to do with that ima...

Automating the new native VCSA bootstrap "Easy Install" in vSAN 6.6
In case you missed the previous article, have a read here which goes into greater detail behind the new VCSA bootstrap installer (also known as vSAN Easy Install) which is part of the new vSAN 6.6 release. As I hinted at the end of the previous post, customers not only have a simplified way of bo...

Using Tags with Storage Policy Based Management
I was doing some work in the lab with Storage Policy Based Management recently. I was using both vSAN and a Virtual Volume array from Nimble Storage. While I was able to create independent policies for both vSAN and VVols, I was curious to see if I could create a policy where I could be offered b...

It makes me WannaCry….
You don’t know how to ease my pain You don’t know… You don’t know how to ease my pain Don’t you hear any voices cryin’? You don’t know how to play the game You cheat… You lie… You don’t even know how to say goodbye… You make me want to cry…. It’s rare that the world of IT impinges on my friends d...

Using Amazon Route53 and Google Apps Together using Domain Aliases to complete SSL Certificate Requests!
Disclaimer: I’ve got nearly 25 years experience in the IT game with a range of skills that take in this task – DNS, Email, Web-Servers. However, for the last 15 years or more I’ve more or less outsourced the management of this to a third-party, or it simply hasn’t been my job. Once I used to teac...

Introducing the docs.vmware.com beta site
Introducing the new VMware docs.vmware.com beta site, brought to you by the VMware Information Experience team!

Revisiting persistent storage with vSphere Integrated Containers
I’ve been getting back into doing a bit of testing with vSphere Integrated Containers 1.1 (VIC for short) in my lab. One of the things that I am very interested in revisiting is how to do persistence of data with VIC and “Containers as VMs”. I did some work on this in the past , but a lot has cha...

vSAN 6.6 Demo: Configuration Assist
Advertise here with BSA I just noticed I still had a demo recoding on my desktop from a couple of weeks ago. The topic is vSAN 6.6 configuration assist. Hadn’t done anything with it, so I just added the narratives and shared it on youtube. Only a 3 minute video and quickly shows you where Configu...

vSAN 6.6 Config Assist incorrectly reports Physical NIC warning with LACP/LAG
A very short post simply to bring an issue to your attention which a number of folks have pinged me about this week. With vSAN 6.6, there is a new feature called Configuration Assistant. As the name implies, it tries to highlight possible configuration issues with your vSAN infrastructure. A numb...

Latest Fling from VMware Labs - Host Profiles CLI
The Host Profiles CLI Fling (hostprofilescli) is a command-line utility that allows vSphere administrators to perform several operations with Host Profiles that are either not currently possible through existing user interfaces, or possible only through graphical interfaces. The hostprofilescli u...

DISCLAIMER
While I do my best to publish unbiased information specifically related to VMware solutions there is always the possibility of blog posts that are unrelated, competitive or potentially conflicting that may creep into the newsletter. I apologize for this in advance if I offend anyone and do my best to ensure this does not happen. Please get in touch if you feel any inappropriate material has been published. All information in this newsletter is copyright of the original author. If you are an author and wish to no longer be used in this newsletter please get in touch.

FROM THE EDITORS VIRTUAL DESK
Hi everyone and welcome to this weeks TAM newsletter packed full of VMware and industry related news. This week we are closing in on the VMUG Virtual Event 6 which happens on June 8th. This is a fantastic event that I want to make sure you are all aware of. Here are all of the details:
Date: Thursday, June 8, 2017 Time: 9 AM – 5 PM Central Standard Time
With easy admission from your desk or home office, VMUG Virtual Event 6.0 will provide you with keynote and breakout sessions, a virtual trade show floor, and opportunities to engage with other attendees at the click of a button. Not to mention access to webcasts, white papers, and case studies available for download. For more information and event details please visit: https://www.vmug.com/Attend/VMUG-UserCon/VirtualEvent
Register today! VMware experts, VMUG leaders, and partners are waiting to educate you.

I hope you will take advantage of this event, register and catch all of the goodness that the VMUG Virtual Event brings.

I wish you all a fantastic week ahead.

Virtually Yours
VMware TAM Team
Latest News | Twitter | Facebook | LinkedIn | Blog | Newsletter | Archive
-
TAM BLOG | TAM WEBCASTS |
(Kelly Dare) | (Michelle Kaiser) |

VMUG (Jodi Shely)
Virtual Event 6
Full Webcasts List

NEWS AND DEVELOPMENTS FROM VMWARE
Apply the Latest VMware ESXi Security Patches to OEM Custom Images and Visualize the Differences
VMware vSphere customers often rely on custom VMware ESXi images from server OEM partners, such as Cisco, Dell, and HPE, to ensure support for the specific devices that each of those manufacturers include with their hardware. This arrangement makes initial deployment easier, because all the requi...

The VMware Certified Lenovo XClarity Web Client Plug-In Solution
The VMware Certified Lenovo XClarity Solution Capabilities Lenovo recently certified their X Clarity vSphere web client plugin solution. Lenovo XClarity Administrator is a new centralized resource management solution that enables administrators to deploy infrastructure faster and with less effort...

New KB articles published for week ending 20th May 2017
VMware Identity Manager VMware Identity Manager – Messaging Connection failure in a clustered environment Date Published: 2017/05/14 VMware ESXi VLAN Tagging issues with Intel X710 network adapters Date Published: 2017/05/18 Minimal amount of Reliable Memory in ESXi Date Published: 2017/05/16 VMw...

Progressive Dutch Municipality Protects Citizen Data and Meets Compliance with VMware NSX
Summary: Municipality of Zoetermeer implements Zero-Trust model with VMware NSX-enabled micro-segmentation for advanced security inside data centers. Zoetermeer follows the Dutch BIG ( Baseline Information Security Dutch Municipalities) regulations Zoetermeer is a modern, fast-growing municipalit...

Speed, Power, Performance: NSX & Memorial Day Motorsports
With Memorial Day weekend coming up, for me, it’s all about hot dogs, hamburgers, and fast car racing. I am huge Formula 1 fanatic, but Memorial Day is a bonanza of racing from the F1 Monaco Grand Prix, to NASCAR’s Coke 600, and of course the Indianapolis 500 all on the same day! The raw speed an...

The 5 Trends Every Cloud Evangelist Has on Their Mind
Even though the future of IT belongs to the cloud, much of the enterprise world is still clinging to legacy systems. In fact, 90 percent of workloads today are completed outside of the public cloud . With this continued resistance to cloud adoption at the enterprise level, today’s “cloud evangeli...

Introducing TPCx-HS Version 2 – An Industry Standard Benchmark for Apache Spark and Hadoop clusters deployed on premise or in the cloud
Since its release on August 2014, the TPCx-HS Hadoop benchmark has helped drive competition in the Big Data marketplace, generating 23 publications spanning 5 Hadoop distributions, 3 hardware vendors, 2 OS distributions and 1 virtualization platform. By all measures, it has proven to be a success...

PhoenixNAP Outmaneuvers The Competition With vCloud Director
Competition has a way of forcing change in any business. How a business navigates that change can determine who wins and who loses. So when competitive pressure forced cloud infrastructure provider PhoenixNAP to make changes to their product, they turned to VMware’s vCloud Director.   In a new wh...

Switching from ACC to VMware IDM Connector made easy!
If you have been integrating VMware IDM with Active Directory using AirWatch Cloud Connector (ACC), and need to switch to IDM connector to take advantage of various features such as MFA integration, Horizon & Citrix desktops/apps integration and others, then we have made it easier to switch witho...

Introducing VMware Enterprise Systems Connector
You asked for it, and we delivered. Happy to announce availability of VMware Enterprise Systems Connector (VESC), a unified installer to install both VMware IDM connector and AirWatch Cloud Connector (ACC) on the Windows platform starting with AirWatch 9.1 release. You can download the VESC insta...

The Latest Mobile News on Apple, Android & Windows 10
You asked. We answered. Readers frequently ask about the Apple Device Enrollment Program (DEP) on the AirWatch Blog. This week, we updated one of our most popular posts to answer the top questions on DEP. Read it here . Concerned about Android app security? During the Google I/O developer festiva...

Welcome to VMware: A New Hire’s True Story of Lost Luggage, Bug Registers & Workspace ONE
My first week at VMware was daunting: flying from Ireland to our head office in Palo Alto, losing my luggage and credit cards not working. On my first day, I ran around like a headless chicken trying to meet with my new team with nothing but worn clothes and trainers. In all, it was an absolute n...

Building Great Products Starts with Building a Great Team, Part 2
In the first of our two-part interview with Paul Young, VP of Products at Pragmatic Marketing , we discussed the fundamentals of the Pragmatic Marketing Framework™ and some cross-functional challenges that product development and user experience (UX) teams face when it comes to building great pro...

[Case Study] Halton Healthcare Modernizes Data Centers & Expands with New Hospital
Award-winning Halton Healthcare operates three community hospitals in the Region of Halton in southern Ontario, Canada. The organization is expanding to meet the needs of the growing area it serves. Old IT systems could not adequately serve a patient population expected to double by 2031. Buildin...

Memorial Healthcare Protects Patient Data with a Secure Digital Clinical Workspace
Memorial Healthcare , a top-rated community hospital in Michigan that’s won awards for patient engagement, sees technology as a key to advancing healthcare in its region. Their secure clinical digital workspace allows staff to access the apps and data they need anytime, anywhere. To transform sec...

VMware Horizon FIRST Certified VDI Solution with Dassault Systèmes’ 3DEXPERIENCE Platform
We are excited to announce that VMware Horizon 7 is the first certified VDI solution with Dassault Systèmes’ 3D EXPERIENCE Platform R2016x and R2017x. The 3DEXPERIENCE Platform leverages Dassault Systèmes’ world-class 3D software applications that transform the way products are designed, produced...

VMware AirWatch 101: AirWatch REST APIs
  Do you ever wish the productivity apps your end-users love had more security features? VMware AirWatch REST APIs can help make this idea a reality by integrating AirWatch REST APIs with existing IT infrastructures and third-party applications. AirWatch API integration extends enterprise mobilit...

7 Questions Answered about AirWatch & the Device Enrollment Program from Apple
This blog was updated on May 22,2017, with the latest information about the Device Enrollment Program from Apple. Join the conversation on Twitter using #iOSinBusiness. What is the Device Enrollment Program from Apple? The Device Enrollment Program provides a fast, streamlined way to deploy your ...

EXTERNAL NEWS FROM 3RD PARTY BLOGGERS
Intro to VMware NSX-T
This video shows an introduction to the VMware NSX-T platform. Additional information can be found here:  Kubernetes and VMware NSX  and  VMware NSX-T Documentation

Photon Platform revisited – checking out v1.2
Its been a while since I had a chance to look at our Photon Platform product. Version 1.2 launched last month, with a bunch of new features. You can read about those here . I really just wanted to have a look at what changed from a deployment perspective. I’d heard that the whole process has now ...

LONDON VMUG – JUNE 22ND 2017
Well, I’m all registered for my first VMUG in aaaaaages. It will be good opportunity to network and catch-up with all my fellow vMUGGERS as I like to call them! Its literally being a “yonks” since I was active in the community. A yonk being measure of time that starts with a career break, and end...

Ensuring peak configuration for vSphere with Runecast
Back in the day when I could spend time working on vCheck (I miss those days!) I always wished there was a programmatic way to look at the data in the VMware KB articles and be able to mine the information for potential issues or be aware of enhancements to the configuration I had made with my sp...

A closer look at the Infinio Cache Accelerator I/O Filter
The folks over at Infinio were kind enough to send me their latest Cache Accelerator I/O Filter so I could set it up in my lab. I must say, this seemed to be the most intuitive of the VAIO plugins (vSphere API for I/O Filters) that I have used to date. In this post, I just want to run run through...

Oracle Monster Virtual Machine Performance on vSphere 6.5
The ability to run extremely large virtual machines on vSphere 6.5 aligns closely with the needs of large databases in the enterprise today. Specifically, Oracle database instances in some cases require large amounts of RAM, many processors, and high-speed flash-based storage to achieve the perfo...

DISCLAIMER
While I do my best to publish unbiased information specifically related to VMware solutions there is always the possibility of blog posts that are unrelated, competitive or potentially conflicting that may creep into the newsletter. I apologize for this in advance if I offend anyone and do my best to ensure this does not happen. Please get in touch if you feel any inappropriate material has been published. All information in this newsletter is copyright of the original author. If you are an author and wish to no longer be used in this newsletter please get in touch.

FROM THE EDITORS VIRTUAL DESK
Hi everyone, this week I have 3 items to bring your attention to so please read on for more info.

Latest TAM Blog - Call Before you Dig
It is an axiom of the IT business that all the scary stuff we do seems to happen on nights, holidays, and weekends.  Through custom and habit, our data center migrations, software upgrades, hardware upgrades, and just about anything else nerve-wracking and transformation-related never seems to take place during normal working daylight hours. Continue reading here...

VMUG Virtual Event 6.0
With easy admission from your desk or home office, VMUG Virtual Event 6.0 will provide you with keynote and breakout sessions, a virtual trade show floor, and opportunities to engage with other attendees at the click of a button. Not to mention access to webcasts, white papers, and case studies available for download. Head over to the website to learn more and register - https://www.vmug.com/Attend/VMUG-UserCon/VirtualEvent

TOP vBLOG for 2017
For those that don’t know.  vSphere-Land is a great resource for VMware virtualization information.  Mainly this site is known for various lists around VMware products and information.  Every year they host a voting session to help promote the VMware blogging community.  Soon after the voting concludes vSphere-Land post the TOP vBLOGs for 2017.  This list helps to support the hard work bloggers do to support VMware community. If you’d be so kind to take some time to vote for your favorite blog I know the blogging community would apreciate it.
Simply start by going to this link -- http://topvblog2017.questionpro.com/
Voting will close on 06/30

Virtually Yours
VMware TAM Team
Latest News | Twitter | Facebook | LinkedIn | Blog | Newsletter | Archive
-
TAM BLOG | TAM WEBCASTS |
(Kelly Dare) | (Michelle Kaiser) |

VMUG (Jodi Shely)
Full Webcasts List

NEWS AND DEVELOPMENTS FROM VMWARE
VMware Technologists Join Forces for Annual R&D Innovation Offsite
By Laetitia Farrugia, Program Manager, Office of the CTO at VMware and Sarah Shvil, Senior Manager, Innovation Programs PMO, Office of the CTO at VMware Last week in May, VMware held its 13th flagship internal R&D conference called RADIO (R&D Innovation Offsite). This annual event, sponsored by R...

New KB articles published for week ending 27th May 2017
VMware Workstation “serial0: Unable to launch virtual printer proxy” error after upgrading Workstation Pro 12.5.5 to 12.5.6 Date of Published:2017/05/24 Cannot launch VMware Workstation on SUSE Linux Enterprise Server 11 and SUSE Linux Enterprise Desktop 11 Date of Published:2017/05/22 VMware vRe...

Don’t Miss out on These 5 Spotlights on Security at vForum Online Summer 2017
You’ve likely heard it before: “All businesses are now digital businesses.” But since the business has expanded into digital space, shouldn’t something as critical as business security digitally expand too? That’s where the VMware ubiquitous software layer comes into play — sitting across the app...

NEW VMworld 2017 Bootcamp – vSphere Advanced Performance Design, Configuration and Troubleshooting
New this year for VMworld 2017 in Las Vegas, we will be offering a pre-VMworld bootcamp focused on vSphere platform performance. Specific SQL and Oracle bootcamps will still be offered, but we have had many requests for a workload agnostic program. This bootcamp will enable you to confidently sup...

NSX Load Balancing – Accelerated Layer 4 Virtual Servers
In the previous blog , we investigated the basic feature set of NSX Load Balancing, some of the business reasons to use it, and deployed an ESG (Edge Services Gateway), the NSX load balancing platform. Today, we are going to setup our first virtual server. When we look at load balancing, it opera...

Multi-site Active-Active Solutions with NSX-V and F5 BIG-IP DNS
I’ve written several prior blogs on multi-site solutions with NSX-V discussing topics such as fundamentals, design options, multi-site security, and disaster recovery; see below links to review some of the prior material. In this post, I’ll discuss how VMware NSX-V and F5 BIG-IP DNS (prior known ...

VMware vCloud Director: 451 Research Impact Report Explores Expanded Capabilities for Service Providers
The introduction of vCloud Director 8.20 received analyst coverage from 451 Research, which took a closer look at the platform and the expanded capabilities enabling service providers to manage and operate virtual data centers (VDCs) for multiple customers.   Because vCloud Director is VMware’s s...

Enabling Organization Rights in vCloud Director
vCloud Director 8.20 introduced new services that Tenants can consume from the self-service tenant portal, for e.g., Distributed Firewall configurations, Dynamic Routing, L2 and SSL VPN, etc. By default, these new services are restricted by tenants/organizations. This allows service providers to ...

Run your Cloud Native Applications in production with vRealize Automation XaaS scalable components
Cloud Native Applications are getting some momentum. Still there is some reticence to run these in production on premise, particularly for the applications that could become business critical. VMware mission is to be here to help. As part of our container portfolio we do have Photon OS to run con...

Progressive Dutch Municipality Protects Citizen Data and Meets Compliance with VMware NSX
Summary: Municipality of Zoetermeer implements Zero-Trust model with VMware NSX-enabled micro-segmentation for advanced security inside data centers. Zoetermeer follows the Dutch BIG ( Baseline Information Security Dutch Municipalities) regulations Zoetermeer is a modern, fast-growing municipalit...

[Video] Western Carolina University Extends Digital Workspace Solutions Campus-Wide
Nestled in the mountain town of Cullowhee, Western Carolina University (WCU) is the westernmost school in the University of North Carolina system. From the residence hall to the science lab, the school is extending digital workspace solutions to all corners of the campus and beyond. WCU was the f...

Using VMware Identity Manager to transform users between Active Directory domains..
I get a lot of questions about how to solve Single Sign-On (SSO) of users between two Active Directories without trust. Using the federation protocol SAML and VMware Identity Manager this is easy to achieve. In my example we have two Domains, A and B. Users in Domain A wants to access resources i...

VMworld 2017: Here’s What AirWatch Customers Can Expect
Experience EUC at VMworld Join us at VMworld 2017 to experience end-user computing (EUC) like never before. Learn how VMware products and solutions come together to drive a consumer simple, enterprise secure digital workspace that delivers value and efficiency across your organization. Hear expan...

Announcing VMware Horizon Cloud with Hosted Infrastructure: Networking Overview
I am excited to announce a new white paper: VMware Horizon Cloud with Hosted Infrastructure: Networking Overview . This white paper extends the recently posted VMware Horizon Cloud Service with Hosted Infrastructure: Deployment Considerations paper, and delves deeper into the networking details t...

Mosaic Life Care Transforms Healthcare Services with VMware Mobility & Security
The post Mosaic Life Care Transforms Healthcare Services with VMware Mobility & Security appeared first on VMware End-User Computing Blog .

EXTERNAL NEWS FROM 3RD PARTY BLOGGERS
Routing with NSX using multiple sites (eBGP)
There are many options to configure routing with VMware NSX components. Especially when multiple sites come into play this can be challenging. This video created by Iwan Hoogendoorn will explain how to configure multi-site routing with eBGP and it uses the one primary site for all the north / sou...

Managing ESXi Embedded Host Client settings
There was a question the other day about managing ESXi Embedded Host Client (EHC) settings which you can find by click on the logged-in username and navigating to the "Settings" section as shown in the screenshot below. Customers can manage things like the default VM Console used whether that is ...

Whats new vSphere High Availability
This video covers Whats new vSphere High Availability.

Deploy Kubernetes on Photon Platform 1.2 and VSAN
To complete my series of posts on Photon Platform version 1.2, my next step is to deploy Kubernetes (version 1.6) and use my vSAN datastore as the storage destination. The previous posts covered the new Photon Platform v1.2 deployment model , and I also covered how to setup vSAN and make the data...

Introduction to the vSphere Client 6.5
This video is an introduction to some new features in the vSphere Client 6.5

Sizing a vSAN Stretched Cluster
Advertise here with BSA I have had this question a couple of times already, how many hosts do I need per site when the Primary FTT is set to 1 and the Secondary FTT is set to 1 and RAID-5 is used as the Failure Tolerance Method? The answer is straight forward, you have a local RAID-5 set locally ...

Deploying vSAN with Photon Platform v1.2
This is a bit of a long post, but there is a lot to cover. In a previous post, I walked through the deployment of Photon Platform v1.2 , which included the Photon Installer, followed by the Photon Controller, Load-Balancer and Lightwave appliances. If you’ve read the previous post, you will have ...

Cool Tool - VMware Tools Client
VMware Tools Client allows you to interact with your vSphere VMs without network connectivity, it executes scripts and transfer files to the vSphere Virtual Machines through VMware Tools. Main features: Commands / Scripts execution Scripts stored in exportable ".db" file Download file from virtua...

DISCLAIMER
While I do my best to publish unbiased information specifically related to VMware solutions there is always the possibility of blog posts that are unrelated, competitive or potentially conflicting that may creep into the newsletter. I apologize for this in advance if I offend anyone and do my best to ensure this does not happen. Please get in touch if you feel any inappropriate material has been published. All information in this newsletter is copyright of the original author. If you are an author and wish to no longer be used in this newsletter please get in touch.

FROM THE EDITORS VIRTUAL DESK
Hi everyone, another great week of updates awaits you below. There were also many product updates this past week. Here is a short list of a number of these that may be of interest to you depending on your current environment. I suggest a chat to your TAM to ensure that all requirements are fulfilled and the upgrade goes smoothly.

vSphere 6.5 e
Download: Download Page
Release Notes:Release Notes

vRealize Business for Cloud 7.3.0
Download:  Download Link for vRBC 7.3
Release Notes:  Release Notes for vRBC 7.3
Documentation Link:  Documentation for vRBC 7.3

vRealize Service Discovery Management Pack 1.0.1
Download, Binaries, and Documentation:  https://solutionexchange.vmware.com/store/products/vrealize-operations-service-discovery-management-pack

vRealize Log Insight 4.5.0
Download:  https://my.vmware.com/en/group/vmware/get-download?downloadGroup=VRLI-450&productId=598&rPId=12336
Release Notes:  http://pubs.vmware.com/Release_Notes/en/LogInsight/45/VMwarevRealizeLogInsight45ReleaseNotes.html

vRealize Operations Manager 6.6
Release Notes - http://pubs.vmware.com/Release_Notes/en/vrops/66/vrops-66-release-notes.html
Download Page - http://www.vmware.com/download/download.do?downloadGroup=VROPS-660
Documentation:  http://bit.ly/vmHAD_vROps6_6Docs

I wish you a successful week ahead!

Virtually Yours
VMware TAM Team Brisbane
Latest News | Twitter | Facebook | LinkedIn | Blog | Newsletter | Archive
-
TAM BLOG | TAM WEBCASTS |
(Kelly Dare) | (Michelle Kaiser) |

VMUG (Jodi Shely)
Full Webcasts List

NEWS AND DEVELOPMENTS FROM VMWARE
Huawei Storage Next Generation Client Plug-in Solution
Huawei Storage Next Generation Client Plug-in Solution Capabilities: Huawei Storage Next Generation Client Plug-in for VMware vSphere Web Client, integrating with VMware vSphere platform, enabling VMware administrators to independently and centrally manage Huawei storage resources via VMware vSph...

New KB articles published for week ending 10th June 2017
VMware App Volumes When running background jobs, errors may occur Date of Published: 2017/06/06 VMware ESXi ESXi 6.5 Host Fails With a Purple Screen Diagnostic, Indicating That CPU XX / World XXXXXX Tried to Re-Acquire a Lock Date of Published: 2017/06/06 “ACPI Warning: 32/64X length mismatch….” ...

Application Workload Guidance and Design for Virtualized SAP S/4HANA® on vSphere (Part 1/4)
SAP Business Suite 4 SAP HANA (or SAP S/4HANA ) is the SAP Business Suite that is built on SAP’s in memory columnar database platform SAP HANA. SAP HANA ® , the in-memory real-time platform, was initially introduced as a physical appliance and has steadily evolved to include support for virtualiz...

Oracle on VMware vSphere & vSAN – Preparing for an the Oracle Audit
In the last post , we addressed the Licensing fuds and myths when it comes to addressing Oracle Licensing on VMware vSphere / VSAN technologies and explained how Oracle licensing DOES NOT change from a licensing perspective, whether you run Oracle workloads on a classic vSphere environment or Hyp...

Instem Brings Life-Changing Products to Market Faster with VMware and Datapipe
Instem is a global life sciences IT company. This puts them in the unique position that they need to meet strict compliance standards while being able to scale as needed. When looking for a cloud partner that allowed them to do all that and more, Instem turned to Datapipe and the VMware vCloud® A...

Announcing Availability of VxRail by VMware and Dell EMC Through VMware vCloud® Air™ Network Program
Together, with Dell EMC, we’re excited to announce the availability of VxRail – the industry’s broadest HCI Appliance portfolio – through the VMware vCloud® Air™ Network program. This exclusive partnership brings to market the ultimate appliance delivering virtualization, compute, storage, and da...

5 Reasons to Embrace iOS in Business
iOS touches the networks of 99% of Fortune 500 companies, according to Apple , and businesses can now find more than 230,000 enterprise apps for iOS. Those figures aren’t just a result of Apple’s popularity with users. Apple’s strategic programs ensure the mobile operating system meets IT’s expec...

Driving Toward a Digital Workspace? 6 Reasons to Attend vForum Online Summer 2017 (With 2 Bonuses)
Thanks to the modern workforce, Software-as-a-Service (SaaS) apps and mobile workflows, traditional ways of managing and securing users, apps and devices (and all that associated data) are starting to show some cracks in effectiveness. While this presents a challenge for IT, it also presents an o...

Have Connected Devices Become a Cybersecurity Nightmare?
By Michelle Base-Bursey , Product and Partner Marketing Manager at Wandera The vast majority of people in the tech industry today have come to know and love the term “Internet of Things” ( IoT ). In case you’ve heard it so much that it’s starting to lose its meaning, IoT is defined as “the interc...

Don’t Leave Holes in Your Office 365 Access Control Strategy
Secure every access point to Microsoft Office 365 emails and data with VMware Workspace ONE. If your organization is like most, you’re either using Microsoft Office 365 or thinking about an Office 365 implementation. Since the data and email in Office 365 are vital to your business, you’ve probab...

WWDC 2017: Apple News Roundup for Businesses
Last week, the world watched as Apple announced the next major updates and a new product during the Worldwide Developers Conference ( WWDC ). Our VMware team also had a productive week attending the keynote, focused breakout sessions and technical deep dives, and we met with Apple engineers to pl...

Congratulations to our Partner Innovation Award Winners
Winners were recognized and honored at Partner Leadership Summit for their outstanding achievement in 21 categories, including routes to market and more. Read full post . The post Congratulations to our Partner Innovation Award Winners appeared first on Partner News .

What’s Ahead for Marketing? Find out on June 21…
Register now and join in on the discussion with our Partner Marketing Leadership team on June 21 at 8am Pacific. They will cover upcoming partner events along with how you can leverage the strategic IT priorities’ marketing campaigns and packages (content, programs, and integrated campaigns). The...

VMware vRealize Updates Bring Opportunities
VMware’s recent product updates make it easier to accelerate your customers’ digital transformation by modernizing their existing data center environment and simplifying management of heterogeneous, multi-vendor cloud environments. The updated VMware vRealize® Cloud Management Platform brings opp...

EoA of VMware vCenter Host Gateway
Read our Knowledge Base for more information on VMware’s announcement of the End of Availability (EoA) of VMware vCenter Host Gateway effective with VMware vCenter Server 6.5 release, and all future releases. Impacted customers have been notified. The post EoA of VMware vCenter Host Gateway appea...

EXTERNAL NEWS FROM 3RD PARTY BLOGGERS
Working with Virtual SAN Storage Policies
This video shows you how to create or modify a Virtual SAN storage policy, how to assign a policy to VMs and other objects, and how to check policy compliance.

New Training Course - VMware vSAN: Deploy and Manage [V6.6]
In this three-day course , you will focus on deploying and managing a software-defined storage solution with VMware vSAN™ 6.6. You will learn how vSAN functions as an important component in the VMware software-defined data center. You will gain practical experience with vSAN concepts through the ...

How to move vSAN Datastore into a Folder?
A question came up the other day from a customer that wanted to move a vSAN-based datastore into a vSphere Folder, but was having some trouble with this operation. vSphere Folders are commonly used by administrators for organizational purposes and/or permission delegation. When the customer tried...

Please vote for NTPRO.NL at the top vBlog 2017
Enter the vBlog 2017 voting contest now!
Jun 14, 2017 6:45:00 AM
Workload Balance in vROps 6.6
Welcome to your lights-out datacenter! With vRealize Operation 6.6 automated workload balance is easier and more controllable than ever. This latest release of vRealize Operation gives you the ability to balance workloads across clusters and datastores, simple controls to govern how much balance ...

Technical White Paper - RDSH Session Load-Balancing in Horizon 6 and Horizon 7
Horizon 6 and Horizon 7 offer Remote Desktop Session Host (RDSH) features that address the scalability and availability of applications across data centers in different locations. This white paper provides best practices for using these new features. This white paper is for administrators who wan...

Introducing Alexa to a few more VMware APIs
Over the weekend, while taking a break from putting together some furniture as it was my time for my daughters nap, I got that the chance to explore and create a new Alexa Skill which integrates with a few of VMware's APIs. This has been something I wanted to try out for some time but have not […]

How to push data in vRealize Operations Manager
Did you ever feel the need to push custom data to vRealize Operations Manager (vROps)? Did you wish, you could see that one parameter or metric specific to your environment in vROps? This post provides exactly that information. Here I demonstrate a script which pushes custom data into vROps. At t...

DISCLAIMER
While I do my best to publish unbiased information specifically related to VMware solutions there is always the possibility of blog posts that are unrelated, competitive or potentially conflicting that may creep into the newsletter. I apologize for this in advance if I offend anyone and do my best to ensure this does not happen. Please get in touch if you feel any inappropriate material has been published. All information in this newsletter is copyright of the original author. If you are an author and wish to no longer be used in this newsletter please get in touch.

FROM THE EDITORS VIRTUAL DESK
Hi everyone, vFORUM Online is live on June 28. Here are the details. Be sure to register.

VMware vFORUM Online 2017
When: June 28, 2017
Time: 9:00 am - 2:30 pm PT
Keynote Speaker: Pat Gelsinger, CEO, VMware
If your time is scarce, travelling to an IT conference may be unrealistic. That’s why we’ve packed vForum Online with an all-inclusive agenda full of technical breakout sessions, live chats with experts and hands-on labs.

Attend vForum Online for the expert guidance to support your digital transformation. Learn about VMware’s proven, practical solutions that can help you:

• Modernize Data Centers
• Integrate Public Clouds
• Empower Digital Workspace
• Transform Security

If you don’t have the time to travel, fire up your web browser and join us at vForum Online and discover new ideas and leadership strategies for game-changing IT.

View: Agenda-at-a-Glance
Register:Register Now

I wish you all a fantastic week ahead, enjoy this weeks newsletter.

Virtually Yours
VMware TAM Team
Latest News | Twitter | Facebook | LinkedIn | Blog | Newsletter | Archive
-
TAM BLOG | TAM WEBCASTS |
(Kelly Dare) | (Michelle Kaiser) |

VMUG (Jodi Shely)
Full Webcasts List

NEWS AND DEVELOPMENTS FROM VMWARE
New KB articles published for week ending 3rd June 2017
VMware App Volumes Two writable volumes are created for a user Date of Published : 2017/05/31 VMware Horizon Horizon 7 Supported Active Directory Domain Services (AD DS) Date of Published: 2017/05/31 VMware Horizon 7 Sizing Limits and Recommendations Date of Published : 2017/05/31 Deployment of M...

Creating Effective SRs
Recently we have been doing analysis of Customer SR data in an attempt to determine ways to provide quicker resolution to our Customers. In many of the SRs we have reviewed we observed a trend. When customers open an SR many of the times their environments are down and/or projects are impacted an...

Creative Calculations: VMware RADIO 2017 MathWall Results
Josh Simons and Na Zhang At the recent RADIO conference, engineers were challenged to create mathematical expressions for each number from 1 to 100 using only the digits in ‘1998’ (the year VMware was founded) combined with mathematical operators of their choice. What follows is the summary of th...

Top vRealize Log Insight articles for May 2017
Update sequence for vSphere 6.5 and its compatible VMware products FAQ: Log Insight for vCenter Server Status of TLSv1.1/1.2 Enablement and TLSv1.0 Disablement across VMware products Authentication to VMware vRealize Log Insight fails with the error: DuplicateUserException: A matching user alread...

Top 20 Horizon View articles for May 2017
Administration dashboard in VMware Horizon View reports the error: Server’s certificate cannot be checked The View virtual machine is not accessible and the View Administration console shows the virtual machine status as Already Used Creating or recomposing a pool fails with error: Invalid value ...

Top 20 vRealize Operations Manager articles for May 2017
After cancelling the selected alerts in vRealize Operations Manager 6.x, one or more of the selected alerts remain active Gemfire report certificate path errors in vRealize Operations Manager 6.x Change the IP address on a vRealize Operations Manager 6.0.x single-node deployment Web pages, produc...

Top 20 vRealize Automation articles for May 2017
Logging in to a tenant with verified administrator credentials or user credentials fails in vRA 6.2.x Joining the VMWare vCenter Server Appliance or VMware vRealize Automation Identity Appliance to a domain fails with the error: Error trying to join AD, error code [31] “Hard disk x’ ExternalDiskI...

Top 20 vSAN articles for May 2017
Component metadata health check fails with invalid state error Cannot view or add vSAN Storage Providers in the vSphere Web Client “Host cannot communicate with all other nodes in vSAN enabled cluster” error A virtual machine on a vSAN datastore might be renamed when vSAN becomes inaccessible Dyi...

Top 20 NSX articles for May 2017
“The backing EAM agency for this deployment could not be found” error after restore from backup ESXi 5.5 and 6.0 hosts fail with a PSOD: VMCIEventDelayedDispatchCB@com Duplicate VTEPs in ESXi hosts after rebooting vCenter Server NAT does not translate IP addresses when NSX Edge firewall is disabl...

Top 20 ESXi articles for May 2017
ESXi host fails with intermittent NMI PSOD on HP ProLiant Gen8 servers Unable to delete the virtual machine snapshots Snapshot removal task stops at 99% in ESXi/ESX Unable to power off the virtual machine in an ESXi host ESXi host fails with intermittent NMI purple diagnostic screen on HP Gen8 se...

Top 20 vCenter Server articles for May 2017
storage/log directory is full in vCenter Server Appliance 6.0 Purging old data from the database used by vCenter Server Permanent Device Loss (PDL) and All-Paths-Down (APD) in vSphere 5.x and 6.x vCenter Appliance root Partition 100% full due to Audit.log files not being rotated Windows vCenter S...

VMware NSX and Check Point vSEC
One of the current challenges of data center security is the East-West traffic that has become so pervasive as modern applications communicate a great deal between their different components. Conventional perimeter security is poorly placed to secure these lateral flows, to promote a zero-trust m...

vCAN LIVE 2017: Equipping Our Partners to Offer Customers Secure, Agile Clouds Now and In the Future
Market pressures to accelerate digital transformation and remain competitive have caused organizations to look for a cloud environment that will give them the freedom to innovate and also improve responsiveness to market conditions. Whether they need an environment that will give them additional ...
Jun 9, 2017 4:59:53 PM
New VMware Security Advisory VMSA-2017-0011
Today, VMware has released the following new security advisory: “ VMSA-2017-0011 – Horizon View Client update addresses a command injection vulnerability” This documents an important severity command injection vulnerability ( CVE-2017-4918 ) in the service startup script that affects VMware Horiz...

New VMware Security Advisory VMSA-2017-0010 and Updated Security Advisory VMSA-2016-0024.1
On 6th of June 2017, VMware released the following new and updated security advisories: VMSA-2017-0010 – vSphere Data Protection (VDP) updates address multiple security issues. This new security advisory documents two issues. VDP contains a deserialization issue ( CVE-2017-4914 ). Exploitation of...

Manage Existing vCenter Servers via vCloud Director
Are you a service provider managing multiple clients and their vCenter servers? Have you developed your own custom tooling or a web based portal to manage your clients to individual vcenter servers/resource pools in your datacenter? Would you like to break free of the operational overhead of main...

VMware Named a Leader in Gartner Magic Quadrant for Enterprise Mobility Management (EMM)
VMware was named a leader in Gartner Magic Quadrant for Enterprise Mobility Management (EMM). “The EMM landscape has changed considerably over the past seven years and we have maintained a rapid pace of innovation to help customers prepare for the next generation of digital transformation,” said ...

VMware Named a Leader in Gartner Magic Quadrant for Enterprise Mobility Management
For the seventh consecutive year, Gartner named VMware a Leader in the Gartner Magic Quadrant for Enterprise Mobility Management (EMM). [Download the report: 2017 Gartner Magic Quadrant for Enterprise Mobility Management ] The independent research firm’s Magic Quadrant market report positions EMM...

WannaCry Fallout: Implement ‘Least Privilege’ Now
Co-Author: Sisimon Soman is a senior member of the technical staff for VMware EUC, responsible for VMware User Environment Manager R&D. Having worked at Bromium, Citrix, EMC and others, he is well versed in end-user security and threat remediation. It’s been a few weeks since WannaCry ransomware ...

Exclusive Event: VMUG EUC Explore New York City
After a great turnout at the huge Boston Summer VMUG UserCon, VMUG is hitting the road again! Don’t miss the exclusive end-user computing (EUC) experience at the New York City roadshow on Friday, June 16: VMUG EUC Explore New York City . Throughout the one-day conference, attendees will join tech...

VMware AirWatch 101: XML Preferences for macOS Custom Settings Profile
Um … yeah, if you could go ahead and create some macOS custom XML preferences … that’d be great. In the cult-classic film “Office Space,” Peter, the protagonist, finds himself backed into a corner cubicle. Bill Lumbergh, his boss and archnemesis, confronts Peter for ignoring a company-wide memo a...

EXTERNAL NEWS FROM 3RD PARTY BLOGGERS
Please vote for NTPRO.NL at the top vBlog 2017
Enter the vBlog 2017 voting contest now!

How to push data in vRealize Operations Manager
Did you ever feel the need to push custom data to vRealize Operations Manager (vROps)? Did you wish, you could see that one parameter or metric specific to your environment in vROps? This post provides exactly that information. Here I demonstrate a script which pushes custom data into vROps. At t...

Fun with Kubernetes on Photon Platform v1.2
In this post, I’m simply going to show you a few useful tips and tricks to see the power of Kubernetes on Photon Platform v1.2. For someone who is well versed in Kubernetes, there won’t be anything ground-breaking for you in this post. However, if you are new to K8s as I am (K8s is short hand for...

VMware vRealise Operations – What’s New
Last week I was fortunate enough to be briefed by VMware on there new “Intelligent Operations” offering, and given a view of what’s new, and the rationale about the changes. The changes are spread amongst the vRealise suite/portfolio of products including: vRealise Operation 6.6 vRealise Log Insi...

DISCLAIMER
While I do my best to publish unbiased information specifically related to VMware solutions there is always the possibility of blog posts that are unrelated, competitive or potentially conflicting that may creep into the newsletter. I apologize for this in advance if I offend anyone and do my best to ensure this does not happen. Please get in touch if you feel any inappropriate material has been published. All information in this newsletter is copyright of the original author. If you are an author and wish to no longer be used in this newsletter please get in touch.

NSX for vSphere の分散ファイアウォールでは、許可された通信のログを出力することができます。

そこで、特定の対象の通信をすべて許可するルールを作成して、

vRalize Log Insight（vRLI）で通信を可視化してみます。

今回の構成概要です。

ひとつの論理スイッチに接続された 3つの VM で、どのような通信が発生しているかを見てみます。

通信を確認する対象として VM を3台用意していますが、それらはすべて「ls-tenant-03」という

NSX 論理スイッチに接続しています。

DFW で許可された通信は「pass」として ESXi のログファイルに出力されるので、

それを vRLI に Syslog 転送しています。

今回の製品構成は、以前に投稿した下記と同様です。

vRealize Log Insight で NSX DFW の Drop を確認してみる。Part.1

分散ファイアウォールに許可ルールを追加してあります。

• すべての通信を許可するかわりに、適用先を論理スイッチ「ls-tenant-03」に絞っています。
• ルール ID は、1095 です。

このルールは「ログを記録」に変更してあります。

「ls-tenant-03」には、通信を見る対象にする VM 3台だけが接続されています。

それぞれの VM には、10.1.30.0/24 の IP アドレスが付与されています。

すでに、それぞれの VM からは通信が発生している状態です。

「Distributed Firewall - Overview」ダッシュボードで、

ルール ID 1095 にヒットして、通信が許可されている（pass している）ことがわかります。

ちなみに今回の環境では、ID 1095 のルールのみで「ログの出力」をしているので、

対象の VM にまったく関係しない通信ログは出力されません。

「Distributed Firewall - Traffic」ダッシュボードを見ると、受信したログの

通信の、通信元 / 先 の IP アドレス、宛先ポート番号がわかります。

「Firewall top sources」には、期待どおり 10.1.30.100 ～ 10.1.30.102 が表示されています。

この受信したログを、インタラクティブ分析で見てみます。

つづく・・・

vRealize Log Insight と NSX DFW で通信の様子を可視化してみる。Part.2

NSX for vSphere の分散ファイアウォール（DFW）のログを利用して、

vRalize Log Insight（vRLI）で通信を可視化してみます。

今回は、インタラクティブ分析 利用してログを可視化してみます。

この投稿の環境は、このようになっています。

vRealize Log Insight と NSX DFW で通信の様子を可視化してみる。Part.1

それでは、「インタラクティブ分析」の画面を開きます。

既存のダッシュボードに、すでによさそうな情報をもつチャートがある場合は、

そのチャートの「インタラクティブ分析 で開く」ボタンから、

チャートを表示しているフィルタ設定が適用された分析画面を開くことができます。

今回はシンプルなフィルタ操作をするだけなので、

画面上部の「インタラクティブ分析」から開いてもかまいません。

DFW の通信についてのログは、ESXi の dfwpktlogs.log に出力されます。

インタラクティブ分析で DFW のログを解析するときは、

「フィルタの追加」で下記のフィルタを設定することで抽出できます。

• フィールドは「appname」
• 条件は「次を含む」で「dfwpktlogs」を入力する。

今回は pass のログだけ見るので、下記のフィルタも追加します。

• フィールドは「vmw_nsx_firewall_action」
• 条件は「次を含む」で「pass」を入力する。

そして対象の通信を探すためには、「text」として IP アドレスを検索することで抽出できます。

ログのテキスト全体からからIP アドレスの文字列を検索するので

送信元、送信先にかかわらず関係するログを抽出できます。

※ただし、今回に限っては分析対象にかかわるログしか表示されないので意味がないです。

ログを検索する期間は「カスタムの期間」を選択して、

任意の 開始 / 終了 時間を入力しておきます。

通信確認の対象とする VM 同士の通信を見てみます。

通信元、通信先の IP アドレスを、両方「10.1.30.*」にして検索してみます。

vRLI の NSX for vSphere コンテンツパックで利用可能になるフィールドには、

Edge Firewall のものと、Distributed Firewall のものがありますが、

今回は Edge Firewall を使用していないので「edge」とつかないフィールドをフィルタに利用しています。

たとえば下記のような感じです。

通信元をあらわす「src」には 2 つのフィールドがありますが、
vmw_nsx_edge_firewall_src ではなく、
vmw_nsx_firewall_src  をフィルタに指定しておきます。

通信先（dst）のフィールドは、通信元よりも多く用意されています。

ここではまず「vmw_nsx_firewall_dst」を選択しておきます。

検索結果のグループ化の設定をします。

まずは、下記のようにして「適用」をクリックします。

• 時系列 を選択
• vmw_nsx_firewall_dst_ip_port を選択
• vmw_nsx_firewall_protocol を選択 ※これで tcp / udp が判別できます。
• vmw_nsx_firewall_src を選択

結果として、下記のようなチャートが表示されました。

フィルタ、グループ化 の設定により、対象の VM 同士で

どのような通信が発生しているか可視化できました。

※チャートの凡例は「宛先 IP/ポート番号, 元 IP, プロトコル」となっています。

ちょっと雑多な感じがしますが、

グループ化の条件を減らすことで、傾向を把握しやすくすることもできます。

• vmw_nsx_firewall_dst_port ※宛先はIPをなくしてポートだけにする。
• vmw_nsx_firewall_protocol

グループ化がを「適用」すると、通信のプロトコルとポート番号だけのサマリがわかります。

グループ化はそのままで、

対象 VM の IP 以外からの通信も含めたチャートを表示

（vmw_nsx_firewall_src フィールドによるフィルタを削除）してみました。

対象 VM 以外の アドレス（論理スイッチ外）からだと、

SSH（tcp, 22）や HTTP（tcp, 80）の通信があったことがわかります。

うまく利用すれば、ファイアウォール ルールの検討などにも役立ちそうです。

なお、ここでは vRealize Log Insight を利用してみましたが、こういった分析は

製品としては vRealize Network Insight のほうが向いていると思います。

Software-Defined Networking 向け vRealize Network Insight： VMware

ちなみに、今回のログは Docker Swarm を構成している VM の状況をログ取得してみました。

まず、Docker Swarm 構成前に、論理スイッチより外の踏み台サーバから SSH 接続をしています。

最初の Swarm クラスタ構成のタイミングで TCP 2377 番ポート、UDP 7946 番ポートの通信が発生しています。

コンテナを起動したところで TCP 80 番ポート、UDP 4789 番ポートの通信が発生している様子が見られます。

つづく。

vRealize Log Insight と NSX DFW で通信の様子を可視化してみる。Part.3

NSX for vSphere の分散ファイアウォール（DFW）のログを vRalize Log Insight（vRLI）で見てみます。

今回は、前回のインタラクティブ分析の状態をもとにカスタム ダッシュボードを作成してみます。

利用している環境については下記をどうぞ。

vRealize Log Insight と NSX DFW で通信の様子を可視化してみる。Part.1

前回のインタラクティブ分析の様子は下記をどうぞ。

vRealize Log Insight と NSX DFW で通信の様子を可視化してみる。Part.2

対象の VM を通信元、通信先 とした通信を確認できるダッシュボードを作成してみます。

ざっくり「10.1.30.*」を通信元、通信先としているものだけ絞って見ます。

カスタム ダッシュボードの作成。

まず、対象サーバ宛の通信許可ログを表示するチャートをダッシュボードに追加します。

ダッシュボードに追加するチャートを表示した「インタラクティブ分析」の画面で、

「現在のクエリをダッシュボードに追加」をクリックします。

名前には「サーバ宛の通信」を入力し、「ダッシュボード」で「新規ダッシュボード」を選択します。

（とはいっても今回のチャートでは、表示されるのはサーバ宛通信の pass ログです。）

新規ダッシュボードの名前として、「10.1.30.* の通信」と入力して「保存」します。

名前と、ダッシュボードが選択された状態になるので、「追加」をクリックします。

次に、対象サーバを通信元とした通信許可ログを表示するチャートをダッシュボードに追加します。

フィルタ設定の「vmw_nsx_firewall_dst」フィールドを「vmw_nsx_firewall_src」に変更してチャートを表示してから

「現在のクエリをダッシュボードに追加」をクリックします。

名前は「サーバからの通信」として入力し、

ダッシュボードは先ほど新規作成した「10.1.30.* の通信」を選択して「追加」します。

そして「ダッシュボード」を開くと・・・

カスタム ダッシュボードのマイダッシュボード配下に、

先ほど作成した「10.1.30.* の通信」ダッシュボードが追加されています。

ダッシュボード レイアウトのカスタマイズ。

作成したダッシュボードのレイアウトを変更します。

ダッシュボードに追加したチャート（ウィジェット）は、ドラッグ アンド ドロップで移動できます。

ウィジェットの右端にカーソルをおくと、展開することができます。

それぞれ見やすくなるように、ウィジェットを展開しました。

「カスタムの期間」で、チャートの表示期間を変更することができます。

そして、ここにあるチャートの「インタラクティブ分析 を開く」ボタンをクリックすると・・・

チャート表示のためのフィルタを設定した状態で、インタラクティブ分析を開くことができます。

このように、特定の通信の様子を簡単に確認できるダッシュボードを作成しておくことができます。

まだ続くかもしれない・・・

Hello Folks,

So here we have another topic in  to integrate the vROPs Manager with active directory. The steps mentioned below will guide, how to use your name as a username after integrating the vROPs with Active Directoryof Microsoft.

• Login to vRealize Operations Console https://<IP_Address_vRO>/ui/login.actionusing admin credential.

Note -Select the Local User from top drop down menu

• Click on Administration Menu and expend Access in left Panel.
• Select Authentication Sources and select AD Source which you have integrated earlier. If not added earlier then Click on + icon and add AD Source.
• To Edit AD Source, Click on pencil icon in right side.

• In Source window, Click on Details highlighted below.

• Here you will get two options (samAccountName & userPrincipleName) in Common Name drop down menu.

• You need to choose Common Name as samAccountName if you want to login using short account name rather than email ID.

That’s all, Now from the logic screen you will get the another name on the top drop down menu, where Domain name also appears, select the domain, enter username and password of domain user, here we go -authenticated by AD.

Thanks for visiting

For another wonderful stuff, please keep visiting  vmwars.wordpress.com