Description
On behalf of the client we are looking for a skilled and dynamic candidate to take on a 40 day workshop project using VMware NSX for vSphere.
This project can be conducted 100% remotely
Main tasks of the project are as follows:
- Conduct information gathering workshops to determine design requirements.
- Validate design requirements and constraints
- Identify and discuss use cases and security models.
- Conduct architecture design workshops.
- Design a micro-segmentation solution to meet selected use cases.
- Implement the solution in an environment that meets pre-engagement qulaifications.
- Validate the solution according to the technical validation plan.
- Turn over the solution to Customer teams for functional testing and operation.
- Conduct a knowledge transfer session on the implemented solution.
The scope of this statement of work allows for the assessment, design and deployment of VMware's micro segmentation solution in one production environment.
Key components of the solution consist of:
- Deployement of NSX for vSphere manager.
- Deployment of Distributed Firewall (DFW) Kernel modules for up to fifty VMware ESXi hosts.
- Deployement of one layer 3 Edge Firewall.
- Up to 30 Firewall rules included, to be split between edge, distributed and identify Firewalls.
- Up to 10 security groups defined.
At the conclusion of the engagement the resulting NSX deployment from this engagement is an operational micro-segmentation solution at the Customer site, which enables the Customer to evaluate the security protections and begin evolving their environment and processes.
The scope of work includes the assessment, design and deployment of NSX for vSphere in a production environment.
The following micro-segmentation and security use cases are include in the scope:
- Micro-segmentation using distributed Firewall (DFW) functionality - Stateful Firewall functionality between tenant virtual machines within the same ESXi host or across different ESXi hosts using the DFW functionality.
- Activity monitoring - Demonstration of the ability to view activity on monitored virtual machines through the NSX for vSphere solution, and how this can be used to create application network flow models for future rule development and for troubleshooting and optimization.
- Identify Firewall - Providing the capability to enforce security rules based on external directory service membership/
- Basic service composer functionality - Define and apply security policies based on service profiles for NSX Firewall rules.
- Logging and Monitoring - Direct logging output to a pre-installed customer designated syslog target such as VMware vRealize, Log Insight.