{"id":10072,"date":"2017-05-12T09:25:08","date_gmt":"2017-05-12T07:25:08","guid":{"rendered":"https:\/\/ihs.com.tr\/blog\/?p=10072"},"modified":"2017-06-01T13:49:19","modified_gmt":"2017-06-01T11:49:19","slug":"vmware-airwatch-nsx-entegrasyonu","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/vmware-airwatch-nsx-entegrasyonu\/","title":{"rendered":"VMware AirWatch – NSX Entegrasyonu"},"content":{"rendered":"

VMware AirWatch Kurumsal Mobil Cihaz Y\u00f6netimi<\/a> ile VMware NSX A\u011f Sanalla\u015ft\u0131rma ve G\u00fcvenlik Platformu<\/a>\u2019nu entegre ederek g\u00fcvenlik ilkelerini veri merkezinden mobil uygulama u\u00e7 noktalar\u0131na kadar geni\u015fletmeniz m\u00fcmk\u00fcn. VMware AirWatch – NSX entegrasyonu a\u011f olu\u015fturma ve mikro-segmentasyon \u00f6zelliklerine h\u0131z ve basitlik kazand\u0131r\u0131yor. Mobil uygulamalar\u0131 dinamik olarak takip eden ilkeler olu\u015fturarak \u00e7ok vakit alan a\u011f denetleme i\u015flemine y\u00f6nelik ihtiyac\u0131 ortadan kald\u0131r\u0131yor. A\u015fa\u011f\u0131da NSX\u2019in VMware AirWatch ile nas\u0131l entegre edilece\u011fi hakk\u0131nda bilgiler yer almakta.<\/span><\/p>\n

Uygulama Ba\u015f\u0131na VPN<\/span><\/strong><\/p>\n

Uygulama ba\u015f\u0131na VPN cihaz seviyesi VPN\u2019le ilgili baz\u0131 g\u00fcvenlik sorunlar\u0131n\u0131 \u00e7\u00f6zse de, domaindeki t\u00fcm u\u00e7 noktalar\u0131 ve uygulamadaki hizmetleri risklere a\u00e7\u0131k hale getirir. Kar\u015f\u0131la\u015ft\u0131rmak gerekirse, mikro-segmentasyon uygulama seviyesi eri\u015fimi veri merkezindeki belirli bir u\u00e7 noktaya olacak \u015fekilde k\u0131s\u0131tlayarak u\u00e7 nokta y\u00f6netimini bir \u00fcst seviyeye ta\u015f\u0131r. \u00a0<\/span><\/p>\n

NSX Mikro-Segmentasyon Nedir?<\/span><\/strong><\/p>\n

NSX mikro-segmentasyon tekil u\u00e7 noktalardaki i\u00e7eri ve d\u0131\u015far\u0131 do\u011fru eri\u015fim kontrollerini takip eden mant\u0131ksal, \u00e7ift y\u00f6nl\u00fc bir g\u00fcvenlik duvar\u0131d\u0131r. NSX sanalla\u015ft\u0131rma arac\u0131n\u0131 kullanarak fiziksel g\u00fcvenlik duvarlar\u0131na kolay kullan\u0131ml\u0131 ve hesapl\u0131 bir alternatif te\u015fkil eder.<\/span><\/p>\n

VMware AirWatch – NSX Entegrasyonu ve Sa\u011fl\u0131k Hizmetleri<\/span><\/strong><\/p>\n

Bir kurumsal sa\u011fl\u0131k uygulamas\u0131ndan hasta sa\u011fl\u0131k kay\u0131tlar\u0131na referans veren bir doktor d\u00fc\u015f\u00fcn\u00fcn. Bu senaryoda cihaz\u0131n di\u011fer hi\u00e7bir uygulamas\u0131 de\u011fil ama bu sa\u011fl\u0131k uygulamas\u0131 bir uygulama ba\u015f\u0131na VPN kurabilir. Sonras\u0131nda mikro-segmentasyon sa\u011fl\u0131k uygulamas\u0131 i\u00e7in \u00f6zel bir u\u00e7 nokta olu\u015fturulmas\u0131n\u0131 mecbur k\u0131lar. Bu \u00f6rnekte olu\u015fturulan \u015fey bir hasta veritaban\u0131d\u0131r.<\/span><\/p>\n

Bu seviyede bir k\u0131s\u0131tlama sa\u011fl\u0131k uygulamas\u0131n\u0131n e-posta sunucusuna, bir envanter veritaban\u0131na veya di\u011fer ilgisiz hizmetlere eri\u015femeyece\u011fi anlam\u0131na gelir. Uygulamada \u00f6zel atanm\u0131\u015f gruplar\u0131n olmas\u0131 veri eri\u015fiminin \u00e7al\u0131\u015fan seviyesinde de filtrelendi\u011fini g\u00f6sterir. Farkl\u0131 departmanlarda olup da ayn\u0131 uygulamay\u0131 kullanan doktorlar veya hem\u015fireler belirlenen bu veritaban\u0131na izinsiz olarak eri\u015femezler.<\/span><\/p>\n

\"VMware<\/p>\n

Di\u011fer Kullan\u0131mlar<\/span><\/strong><\/p>\n

– Mobil i\u015f ak\u0131\u015flar\u0131 i\u00e7in artt\u0131r\u0131lm\u0131\u015f a\u011f g\u00fcvenli\u011fi ve gran\u00fcler kontroller<\/span><\/p>\n

– H\u0131zland\u0131r\u0131lm\u0131\u015f dijital \u00e7al\u0131\u015fma alan\u0131 ve BYOD da\u011f\u0131t\u0131mlar<\/span><\/p>\n

– Mobil uygulamalar ve kullan\u0131c\u0131lar i\u00e7in ilke tan\u0131ml\u0131 a\u011f eri\u015fimi<\/span><\/p>\n

– Veri merkezine y\u00f6nelik mobil eri\u015fim ayakizinin azalt\u0131lmas\u0131yla sald\u0131r\u0131 y\u00fczeyinin en aza indirilmesi.<\/span><\/p>\n

– H\u0131zland\u0131r\u0131lm\u0131\u015f mobil uygulama sunumu, testi ve otomasyonu.\u00a0<\/span><\/p>\n

VMware AirWatch – NSX Entegrasyonu \u00c7\u00f6z\u00fcm \u00d6zeti<\/span><\/strong><\/p>\n

Ba\u015far\u0131l\u0131 NSX kurulumlar\u0131ndan sonra veri merkezi u\u00e7 noktalar\u0131n\u0131 temsil eden NSX G\u00fcvenlik Gruplar\u0131 ile AirWatch Konsolu\u2019ndaki hizmetleri senkronize edin. B\u00f6ylece veri merkezi mant\u0131\u011f\u0131n\u0131 VMWAre AirWatch ile payla\u015ft\u0131rm\u0131\u015f olursunuz. Sonra, VMware Per-App Tunnel\u2019\u0131 yap\u0131land\u0131r\u0131n ve kurun. Bu sunucu mobil uygulamalarla a\u011f aras\u0131nda g\u00fcvenli ba\u011flant\u0131 sa\u011flar. Daha sonra y\u00f6netilen uygulamalar\u0131 belirlenen u\u00e7 noktalara y\u00f6nlendirmek i\u00e7in bir Uygulama Ba\u015f\u0131na VPN yap\u0131land\u0131r\u0131n. Son olarak ise uygulamalar\u0131 yap\u0131land\u0131r\u0131n.<\/span><\/p>\n

Yap\u0131land\u0131rd\u0131\u011f\u0131n\u0131z di\u011fer uygulamalar farkl\u0131 senaryo ve kullan\u0131mlara g\u00f6re de\u011fi\u015fiklik g\u00f6sterebilir ama genellikle son kullan\u0131c\u0131lar\u0131n dahili kaynaklara eri\u015fim sa\u011flamak i\u00e7in kulland\u0131klar\u0131 uygulamalard\u0131r. Bu uygulamalar\u0131 yap\u0131land\u0131r\u0131rken AirWatch Konsolu i\u00e7erisindeki Atama Gruplar\u0131\u2019n\u0131 kullanarak kullan\u0131c\u0131 seviyesindeki eri\u015fimleri kontrol edebilirsiniz.<\/span><\/p>\n

VMware NSX Entegrasyonunu Planlay\u0131n<\/span><\/strong><\/p>\n

– A\u011f\u0131n\u0131za eri\u015fen cihaz tiplerini belirleyin<\/span><\/p>\n

– A\u011f eri\u015fiminizdeki u\u00e7 noktalar\u0131 (uygulamalar\u0131) tan\u0131mlay\u0131n<\/span><\/p>\n

– Uygulamalar\u0131 a\u00e7\u0131k\/risk seviyesine g\u00f6re grupland\u0131r\u0131n<\/span><\/p>\n

– Her eri\u015fim seviyesi i\u00e7in g\u00fcvenlik gereksinimlerini belirleyin<\/span><\/p>\n

vSphere 6.1.x+ i\u00e7in VMware NSX Kurun<\/span><\/strong><\/p>\n

– Her g\u00fcvenlik seviyesi i\u00e7in ayr\u0131 birer a\u011f aral\u0131\u011f\u0131 atayarak gelen trafi\u011fi tespit edin<\/span><\/p>\n

– NSX i\u00e7erisinde IP seti tabanl\u0131 g\u00fcvenlik gruplar\u0131 olu\u015fturun<\/span><\/p>\n

– NSX i\u00e7erisinde dahili kaynak tabanl\u0131 g\u00fcvenlik gruplar\u0131 olu\u015fturun<\/span><\/p>\n

– G\u00fcvenlik gruplar\u0131 i\u00e7in g\u00fcvenlik duvar\u0131 kurallar\u0131 belirleyin<\/span><\/p>\n

– Uygulama u\u00e7 nokta eri\u015fimlerini belirleyin<\/span><\/p>\n

– Trafik y\u00f6nlendirme \u00f6r\u00fcnt\u00fcleri olu\u015fturun<\/span><\/p>\n

VMware AirWatch – NSX Entegrasyon\u0131 \u0130\u00e7in Gereklilikler<\/span><\/strong><\/p>\n

– AirWatch Admin Console v8.3+<\/span><\/p>\n

– Linux Installer kullanan AirWatch Tunnel sunucusu. AirWatch Tunnel sanal cihaz da\u011f\u0131t\u0131m\u0131 y\u00f6ntemi \u015fu an NSX entegrasyonu i\u00e7in desteklenmemektedir.<\/span><\/p>\n

– AirWatch Cloud Connector (SaaS m\u00fc\u015fterileri i\u00e7in)<\/span><\/p>\n

– Y\u00f6netilen Android veya iOS cihazlar<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

VMware AirWatch Kurumsal Mobil Cihaz Y\u00f6netimi ile VMware NSX A\u011f Sanalla\u015ft\u0131rma ve G\u00fcvenlik Platformu\u2019nu entegre ederek g\u00fcvenlik ilkelerini veri merkezinden mobil uygulama…<\/p>\n","protected":false},"author":3,"featured_media":10134,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,390],"tags":[],"class_list":["post-10072","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-haberler","category-kurumsal"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/10072","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=10072"}],"version-history":[{"count":3,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/10072\/revisions"}],"predecessor-version":[{"id":10077,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/10072\/revisions\/10077"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/10134"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=10072"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=10072"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=10072"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}