Virtual Appliances Boost Flexibility, Improve Security --- (2009-06-29)

Security products purchased as virtual appliances give IT greater flexibility in deployment than traditional security hardware devices.

The concept of treating network security as a software application has proven to be successful. Organizations can save money by re-purposing expensed servers as security devices, achieve a performance boost by placing network-oriented security on a faster processor and consolidate security functions on fewer servers to save on administration while making the security function a bit greener.

One of the more interesting news items of late barely caused a ripple in the security blogosphere: Check Point Software Technologies, Ltd and Riverbed Technologies Inc. entered an agreement allowing Check Point's new software blade architecture to run as a virtual appliance on Riverbed's Steelhead WAN optimization platform. Branch offices can take advantage of data center consolidation cost savings without sacrificing end-user performance or exposing the organization to increased security risks. Virtualization is one of the technologies that make this enhancement practical. Riverbed relies upon VMware, enabling Check Point to co-exist on the Steelhead device without significant software re-engineering.

The next generation of network perimeter devices will likely offer business connectivity features in addition to firewall security to capture market share. The traditional drivers of firewalls enable business connectivity to the Internet including network address translation, protocol validation, and VPN termination – functionalities that are more important for allowing traffic into the network than for blocking traffic at the edge. Organizations with branch offices and remote campuses are concentrating Internet security into network devices to save on acquisition and operational expenses.

Security vendors can pack more security features into a hardware appliance, such as with Unified Threat Management devices, but the disruptive innovations will appear with integrated capabilities such as WAN optimization, virtualization support, routing, and auditing. Security co-existing with optimization technology is also not new. Microsoft included security with performance features in ISA Server and also integrates secure branch office access to SharePoint repositories.

Originally posted at SearchSecurity.com