IBM Security Virtual Server Protection for VMware V1.1 helps protect your virtual machines

IBM United States Software Announcement 210-394
November 9, 2010


Table of contents
Overview Overview Publications Publications
Key prerequisites Key prerequisites Technical information Technical information
Planned availability date Planned availability date Ordering information Ordering information
Description Description Terms and conditions Terms and conditions
Product positioning Product positioning Prices Prices
Program number Program number Order
now Order now

(Corrected on January 27, 2011)

The Overview and Software requirements sections are revised.

(Corrected on December 6, 2010)

The Program technical support section is revised.

Top rule
At a glance
Bottom rule

IBM® Security Virtual Server Protection for VMware V1.1 provides:

  • Intrusion prevention and firewall
  • VM lifecycle enforcement
  • VM rootkit detection
  • Virtual infrastructure auditing

For ordering, contact your IBM representative, an IBM Business Partner, or IBM Americas Call Centers at 800-IBM-CALL (Reference: YE001).



Back to topBack to top
 
Top rule
Overview
Bottom rule

IBM Security Virtual Server Protection for VMware V1.1 is an integrated threat mitigation product designed to deliver a turnkey solution to help protect your virtual environment against risks and security gaps associated with server virtualization. Security Virtual Server Protection for VMware supports virtual machines (VM) that run in VMware vSphere 4.1 environments.

Capabilities include:

  • Intrusion prevention and firewall
    • Enforces dynamic security wherever virtual machines are deployed
    • Applies one Security Virtual Machine (SVM) per physical server
    • Uses privileged presence to give SVM a holistic view of the virtual network
    • Enables IBM Virtual Patch® technology to shield vulnerabilities on virtual servers regardless of patch strategy
  • Virtual Machine (VM) lifecycle enforcement
    • Performs automatic VM discovery to help combat virtual sprawl
    • Provides virtual network access control by quarantining or limiting network access until VM security posture can be validated
  • VM rootkit detection -- Transparently inspects virtual machines and detects installation of rootkits
  • Virtual infrastructure auditing -- Reports on privileged-user activity in the virtual environment


Back to topBack to top
 
Top rule
Key prerequisites
Bottom rule

For details, refer to the Hardware requirements and Software requirements sections.



Back to topBack to top
 
Top rule
Planned availability date
Bottom rule

November 12, 2010, for electronic delivery

December 3, 2010, for media delivery



Back to topBack to top
 
Top rule
Description
Bottom rule

IBM Security Virtual Server Protection for VMware V1.1 offers protection for every layer of the virtual infrastructure, including host, network, hypervisor, virtual machine, and traffic between virtual machines It helps reduce costs, address compliance, and secure virtual data centers.

Security Virtual Server Protection for VMware V1.1 includes support for VMware ESX and ESXi V4.1, as well as product quality improvements. This is the first release of Security Virtual Server Protection for VMware to be available through Passport Advantage®.

Accessibility by people with disabilities

A U.S. Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be requested at

http://www.ibm.com/able/product_accessibility/index.html


Back to topBack to top
 
Top rule
Product positioning
Bottom rule

Virtualization can offer significant benefits to the IT organization, but existing security solutions typically are not optimized to work in the virtual environment. Traditional security processes and technologies do not effectively protect the additional layers, including the hypervisor, management stack, and virtual network. As a result, virtualized servers may be less secure than the physical servers they replace, leaving organizations at risk of not meeting compliance mandates. Organizations should approach virtualization with an awareness of these new potential risks and apply needed security controls. IBM Security Virtual Server Protection for VMware is an integrated threat mitigation solution designed to allow organizations to fully exploit the benefits of server virtualization while helping protect critical virtualized assets.

IBM has a comprehensive portfolio of security solutions that address security challenges for people and identity, data and information, application and process, network, server and end point, and physical infrastructure. The IBM Security Virtual Server Protection for VMware solution supports the IBM security framework by helping secure an organization's virtual networks and servers.



Back to topBack to top
 
Top rule
Program number
Bottom rule

 
 Program               Program
 number        VRM     name
 
 5725-A42      1.1     IBM Security Virtual Server Protection for VMware
 


Back to topBack to top
 
Top rule
Education support
Bottom rule

Comprehensive education for IBM Tivoli® products is offered through Worldwide Tivoli Education Delivery Services. A wide range of training options are available, including classes led by instructors, learning on demand, on-site training, and blended learning solutions.

For additional information, visit

http://www-306.ibm.com/software/tivoli/education/


Back to topBack to top
 
Top rule
Offering Information
Bottom rule

Product information is available via the Offering Information website

http://www.ibm.com/common/ssi

Also, visit the Passport Advantage website

http://www.ibm.com/software/passportadvantage


Back to topBack to top
 
Top rule
Publications
Bottom rule

No publications are shipped with this program.

Product documentation is available at the following website. Click on IBM Security Virtual Protection for VMware.

http://publib.boulder.ibm.com/infocenter/sprotect/v2r8m0/index.jsp

The IBM Publications Center

http://www.ibm.com/shop/publications/order

The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. Payment options for orders are via credit card (in the U.S.) or customer number for 20 countries. A large number of publications are available online in various file formats, and they can all be downloaded by all countries, free of charge.



Back to topBack to top
 
Top rule
Technical information
Bottom rule

Specified operating environment

Hardware requirements

x86 server platform

Software requirements

IBM Virtual Server Protection for VMware V1.1 supports virtual machines that run in VMware vSphere 4.1 environments.

The program's specifications and specified operating environment information may be found in documentation accompanying the program, if available, such as a README file, or other information published by IBM, such as an announcement letter. Documentation and other program content may be supplied only in the English language.

Planning information

Installability

Software Subscription and Support (also referred to as Software Maintenance) is included with licenses purchased through Passport Advantage and Passport Advantage Express®. Product upgrades and technical support are provided by the Software Subscription and Support (Software Maintenance) offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software, and technical support provides voice and electronic access to IBM support organizations, worldwide.

IBM includes one year of Software Subscription and Support (also referred to as Software Maintenance) with each program license acquired. The initial period of Software Subscription and Support (Software Maintenance) can be extended by the purchase of a renewal option, if available.

Packaging

IBM Security Virtual Server Protection for VMware V1.1 is distributed with:

  • International Program License Agreement (Z125-3301)
  • License Information document
  • DVD
  • Publications (refer to the Publications section)

This program, when downloaded from a website, contains the applicable IBM license agreement and License Information, if appropriate, and will be presented for acceptance at the time of installation of the program. For future reference, the license and License Information will be stored in a directory such as LICENSE.TXT.

Security, auditability, and control

IBM Security Virtual Server Protection for VMware V1.1 uses the security and auditability features of the platform.

The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities.



Back to topBack to top
 
Top rule
Software Services
Bottom rule

IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based, software services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business Partners to provide an extensive portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs.

To learn more about IBM Software Services or to contact a Software Services sales specialist, visit

http://www.ibm.com/software/sw-services/


Back to topBack to top
 
Top rule
Licensing metric definitions and pricing examples
Bottom rule

Licensing metric definitions

Processor Value Unit (PVU)

Processor Value Unit (PVU) is a unit of measure by which the Program can be licensed. The number of PVU entitlements required is based on the processor technology (defined within the PVU Table by Processor Vendor, Brand, Type and Model Number at http://www.ibm.com/software/lotus/passportadvantage/pvu_licensing_for_customers.html) and the number of processors made available to the Program. IBM continues to define a processor, for the purpose of PVU-based licensing, to be each processor core on a chip. A dual-core processor chip, for example, has two processor cores.

Licensee can deploy the Program using either Full Capacity licensing or Virtualization Capacity (Sub-Capacity) licensing according to the Passport Advantage Sub-Capacity Licensing Terms (see webpage below). If using Full Capacity licensing, Licensee must obtain PVU entitlements sufficient to cover all activated processor cores* in the physical hardware environment made available to or managed by the Program, except for those servers from which the Program has been permanently removed. If using Virtualization Capacity licensing, Licensee must obtain entitlements sufficient to cover all activated processor cores made available to or managed by the Program, as defined according to the Virtualization Capacity License Counting Rules at

http://www.ibm.com/software/lotus/passportadvantage/Counting_Software_licenses_using_specific_virtualization_technologies.html

* An Activated processor core is a processor core that is available for use in a physical or virtual server, regardless of whether the capacity of the processor core can be or is limited through virtualization technologies, operating system commands, BIOS settings, or similar restrictions.

Instead of the entitlements required for the Program directly, Licensee must obtain PVU entitlements for this Program sufficient to cover the processor cores for the systems on which the resources managed or processed by the Program reside.

Pricing examples

The following examples are provided to illustrate the client's licensing requirements.

References to processor-based licensing do not represent the actual number of entitlements required. Entitlement requirements are Processor Value Unit based. Processors referenced in these examples represent the designated measurement on which the required number of Processor Value Unit entitlements will be calculated. The number of Processor Value Units required per processor core will depend on the processor type. To determine the number of Processor Value Unit entitlements required per processor core, refer to the Processor Value Unit conversion table on the Passport Advantage website

http://www.ibm.com/software/passportadvantage

Distributed servers

  • Twenty uniprocessor cores
  • Sixty-five 2-way servers
  • Twelve 4-way servers
  • One 8-way server
  • One 12-way server with two virtual or logical partitions
  • One 14-way server
  • One 16-way Sun Ultra server with two 8-way physical partitions (only one of which is managed by Tivoli applications)
  • One 24-way server
  • One z800 server with two uniprocessor IFLs running Linux® (also known as Linux on System z®)

Note: Linux on System z offerings may not be available for all Tivoli products. This licensing example assumes such availability. Linux on System z offerings have distinctly orderable part numbers in Passport Advantage, which should be used when ordering entitlements for IFLs running Linux.

If pricing products without a Linux on System z offering, you should exclude the z800 server entitlement requirement indicated below.

The customer wants to manage the applicable distributed server environment, which requires Processor Value Unit entitlements associated with the following number of processor cores:

Systems Managed                       Quantity in           
                                      customer              Processor cores
                                      environment           to be licensed

Uniprocessor core                     20                     20
2-way                                 65                    130
4-way                                 12                     48
8-way                                  1                      8
12-way (2 logical partitions)          1                     12
14-way                                 1                     14
16-way (2 physical partitions,         1                     16
 one of which is managed by Tivoli
 applications)
24-way                                 1                     24
z800 server with 2 uniprocessor IFLs   1                      2
 (requires Linux on System z
  availability)
 
  Total Processors to be Licensed                           274


Back to topBack to top
 
Top rule
Ordering information
Bottom rule

This product is only available via Passport Advantage. It is not available as shrinkwrap.

 
Product group: IBM Security
  Product:  IBM Security Virtual Server Protection for VMware V1.1 (5725A42)
 
Product category: Security Event Management

The programs in this announcement all have Value Unit-based pricing.

Passport Advantage customer: Media pack entitlement details

Customers with active maintenance or subscription for the products listed are entitled to receive the corresponding media pack.

 
Entitled maintenance offerings
description                                          Part number
 
IBM Security Virtual Server Protection for VMware    BJ0X8EN
V1.1 Mutiplaform DVD English Only Media Pack

Current licensees

New licensees

Orders for new licenses will be accepted now.

Shipment will begin on the planned availability date.

Basic license

Ordering information for Passport Advantage

Passport Advantage allows you to have a common anniversary date Software Subscription and Support (SW S&S) renewals, which can simplify management and budgeting for eligible new versions and releases (and related technical support) for your covered products. The anniversary date, established at the start of your Passport Advantage Agreement, will remain unchanged while your Passport Advantage Agreement remains in effect. New software purchases will initially include twelve full months of Software Subscription and Support (also referred to as Software Maintenance). Software Subscription and Support in the second year (the first year of renewal) can be prorated to be coterminous with your common anniversary date. Thereafter, all Software Subscription and Support (Software Maintenance) will renew at the common anniversary date for twelve full months of Software Subscription and Support (Software Maintenance).

Refer to the IBM International Passport Advantage Agreement and to the IBM Software Support Handbook for specific terms relating to, and a more complete description of, technical support provided through Software Subscription and Support (Software Maintenance).

The quantity to be specified for the Passport Advantage part numbers in the following table is per required number of Processor Value Units. To order for Passport Advantage, specify the desired part number and quantity.

Description                                        Part number
 
Security VSP for VMware Server per PVU Lic +       D0GKWLL
  SW S&S 12 Mo
 
Security VSP for VMware Server per PVU Annual      E0APDLL
  SW S&S Rnwl
 
Security VSP for VMware Server per PVU             D0GKXLL
  SW S&S Reinstate 12 Mo
 

To order a media pack for Passport Advantage, specify the part number in the desired quantity from the following table:


IBM Security Virtual Server Protection              BJ0X8EN
 for VMware V1.1 Multiplaform DVD English Only 
 Media Pack

Security Virtual Server Protection for VMware V1.1 is also available, via Web download, from Passport Advantage.

Subscription and Support

Subscription and Support must be ordered to receive voice technical support via telephone during normal business hours, and future releases and versions, at no additional charge. The capacity of Subscription and Support (for example, Processor Value Units or terabytes) must be the same as the capacity ordered for the product licenses.

To order, specify the Subscription and Support program product number and the appropriate license or charge option.

IBM is also providing Subscription and Support for these products, via a separately purchased offering, under the terms of the IBM International Agreement for Acquisition of Support Maintenance. This offering:

  • Includes and extends the support services provided in the base support to include technical support via telephone during normal business hours.
  • Entitles you to future releases and versions, at no additional charge. Note that you are not entitled to new products.

When Subscription and Support is ordered, the charges will automatically renew annually unless cancelled by you.



Back to topBack to top
 
Top rule
Terms and conditions
Bottom rule

The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage Agreement, and the IBM Agreement for Acquisition of Software Maintenance.

This product is only available via Passport Advantage. It is not available as shrinkwrap.

Licensing

IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use. Part number products only, offered outside of Passport Advantage, where applicable, are license only and do not include Software Maintenance.

This software license includes Software Subscription and Support (also referred to as Software Maintenance).

These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. IBM includes one year of Software Subscription and Support (also referred to as Software Maintenance) with the initial license acquisition of each program acquired. The initial period of Software Subscription and Support (also referred to as Software Maintenance) can be extended by the purchase of a renewal option, if available. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.

License Information form number

L-MTOH-842JCG

The program's License Information will be available for review on the IBM Software License Agreement website

http://www.ibm.com/software/sla/sladb.nsf
Limited warranty applies

Yes

Limited warranty

IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.

IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, consult the IBM Software Support Handbook found at

http://www.ibm.com/support/handbook

IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).

Program technical support

Technical support of a program product version or release will be available for a minimum of three years from the general availability date, as long as your Software Subscription and Support (also referred to as Software Maintenance) is in effect. This technical support allows you to obtain assistance (via telephone or electronic means) from IBM for product-specific, task-oriented questions regarding the installation and operation of the program product. Software Subscription and Support (Software Maintenance) also provides you with access to updates (modifications or fixes), releases, and versions of the program. You will be notified, via announcement letter, of discontinuance of support with 12 months' notice. If you require additional technical support from IBM, including an extension of support beyond the discontinuance date, contact your IBM representative or IBM Business Partner. This extension may be available for a fee.

Money-back guarantee

If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.

For clarification, note that (1) for programs acquired under the IBM International Passport Advantage offering, this term applies only to your first acquisition of the program and (2) for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.

Volume orders (IVO)

No

Passport Advantage applies

Yes, and through the Passport Advantage website at

http://www.ibm.com/software/passportadvantage
Usage restriction

Yes. Usage is restricted to the number of Value Units licensed.

For additional information, refer to the License Information document that is available on the IBM Software License Agreement website

http://www.ibm.com/software/sla/sladb.nsf
Software Subscription and Support (Software Maintenance) applies

Yes. Software Subscription and Support (also referred to as Software Maintenance) is included with licenses purchased through Passport Advantage and Passport Advantage Express. Product upgrades and Technical Support are provided by the Software Subscription and Support (Software Maintenance) offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software and Technical Support provides voice and electronic access to IBM support organizations, worldwide.

IBM includes one year of Software Subscription and Support (Software Maintenance) with each program license acquired. The initial period of Software Subscription and Support (Software Maintenance) can be extended by the purchase of a renewal option, if available.

While your Software Subscription and Support (Software Maintenance) is in effect, IBM provides you assistance for your routine, short duration installation and usage (how-to) questions, and code-related questions. IBM provides assistance via telephone and, if available, electronic access, only to your information systems (IS) technical support personnel during the normal business hours (published prime shift hours) of your IBM support center. (This assistance is not available to your end users.) IBM provides Severity 1 assistance 24 hours a day, 7 days a week. For additional details, consult your IBM Software Support Handbook at

http://www.ibm.com/support/handbook

Software Subscription and Support (Software Maintenance) does not include assistance for the design and development of applications, your use of programs in other than their specified operating environment, or failures caused by products for which IBM is not responsible under the applicable agreements.

For additional information about the International Passport Advantage Agreement and the IBM International Passport Advantage Express Agreement, visit the Passport Advantage website at

http://www.ibm.com/software/passportadvantage
System i Software Maintenance applies

No

Variable charges apply

No

Educational allowance available

Not applicable.



Back to topBack to top
 
Top rule
IBM Electronic Services
Bottom rule

IBM has transformed its delivery of hardware and software support services to help you achieve higher system availability. Electronic Services is a Web-enabled solution that offers an exclusive, no-additional-charge enhancement to the service and support available for IBM servers. These services are designed to provide the opportunity for greater system availability with faster problem resolution and preemptive monitoring. Electronic Services comprises two separate, but complementary, elements: Electronic Services news page and Electronic Services Agent.

The Electronic Services news page is a single Internet entry point that replaces the multiple entry points traditionally used to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems.

The Electronic Service Agent™ is no-additional-charge software that resides on your server. It monitors events and transmits system inventory information to IBM on a periodic, client-defined timetable. The Electronic Service Agent automatically reports hardware problems to IBM. Early knowledge about potential problems enables IBM to deliver proactive service that may result in higher system availability and performance. In addition, information collected through the Service Agent is made available to IBM service support representatives when they help answer your questions or diagnose problems. Installation and use of IBM Electronic Service Agent for problem reporting enables IBM to provide better support and service for your IBM server.

To learn how Electronic Services can work for you, visit

http://www.ibm.com/support/electronic


Back to topBack to top
 
Top rule
Prices
Bottom rule

Business Partner information

If you are an IBM Business Partner -- Distributor for Workstation Software acquiring products from IBM, you may link to Passport Advantage Online for resellers where you can obtain Business Partner pricing information. An IBM ID and password are required.

If you are an IBM Business Partner - Distributor for IBM Internet Security Systems™ (ISS) acquiring products from IBM via End to End Security Ordering System (ESOS), standard ISS geography based incentives and pricing apply.

Orders for IBM Virtual Server Security for VMware V1.0 will be fulfilled with a download of IBM Security Virtual Server Protection V1.1 through the standard ISS delivery process.

The ESOS system will be accepting IBM Virtual Server Security for VMware V1.0 orders for 90 days from the date of this announcement for those Business Partners not currently enabled on Passport Advantage.

https://www.ibm.com/software/howtobuy/passportadvantage/paoreseller

For additional information and current prices, contact your local IBM representative.

Information on charges is available at website

http://www.ibm.com/support

In the Electronic tools category, select the option for Purchase/upgrade tools.

Passport Advantage

For Passport Advantage and charges, contact your IBM representative or your authorized IBM Business Partner. Additional information is also available at

http://www.ibm.com/software/passportadvantage


Back to topBack to top
 
Top rule
Order now
Bottom rule

To order, contact the Americas Call Centers or your local IBM representative, or your IBM Business Partner.

To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU (426-4968).

Phone:      800-IBM-CALL (426-2255)
Fax:        800-2IBM-FAX (242-6329)
Internet:   callserv@ca.ibm.com
Mail:       IBM Teleweb Customer Support
            ibm.com® Sales Execution Center, Americas North
            3500 Steeles Ave. East, Tower 3/4
            Markham, Ontario
            Canada
            L3R 2Z1

Reference: YE001

The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.


Note: Shipments will begin after the planned availability date.
Trademarks

Electronic Service Agent and Internet Security Systems are trademarks of IBM Corporation in the United States, other countries, or both.

IBM, Virtual Patch, Passport Advantage, Tivoli, Express, System z and ibm.com are registered trademarks of IBM Corporation in the United States, other countries, or both.

Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both.

Other company, product, and service names may be trademarks or service marks of others.

Terms of use

IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at:

http://www.ibm.com/legal/us/en/

For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page

http://www.ibm.com/planetwide/us/

Terms of use