VMware NSX-T Micro-Segmentation via vRealize Log Insight

Reading Time: 6 minutes

I work with a lot of customers to design and deploy secure, zero-trust environments utilising VMware NSX-T Data Center and, specifically, by using its Distributed Firewall (DFW). I’ve also spoken at several VMUGs where I’ve discussed the realities of micro-segmentation using both NSX for vSphere (NSX-v) and NSX-T and the tools that can be utilised to aid in the identification of application dependencies, traffic flows, services, etc.

I also understand that not all customers are able to utilise some of the more advanced VMware toolings such as NSX Intelligence and vRealize Network Insight, however, there is another tool that we can use to identify our application dependencies and, best of all, if you’re a licensed NSX-T customer, you’re also licensed for…vRealize Log Insight (vRLI).

In this article, we explore how we can utilise vRLI to identify and visualise application traffic flows so that we can more effectively secure our applications.

Continue reading → VMware NSX-T Micro-Segmentation via vRealize Log Insight

VMware vRealize Log Insight – End of Availability

Reading Time: < 1 minute

Yesterday (Monday 16th July 2018) VMware announced the End of Availability for vRealize Log Insight for vCenter. This enabled all vCenter Server licensees to enjoy a cool 25 OSI (Operating System Instance) usage. Sadly, the current version of vRealize Log Insight (6.4.x) will be the last version to support vRealize Log Insight for vCenter and, as such, the next release will not accept vCenter Server license keys during activation. End of General Support for vRealize Log Insight for vCenter will run until 23rd August 2019.

Please note, vRealize Log Insight standalone (part of the vRealize and vCloud Suites), Log Insight for NSX, and Log Insight for VMware Cloud Foundation will not be affected.

For more information, please view the recent VMware Blog article and Knowledgebase Article KB55980. Likewise, please also check out the VMware Lifecycle Product Matrix.

vRealize Log Insight Logo

VMware vRealize Log Insight: Part 2 – VMware NSX Integration via Content Packs

Reading Time: 4 minutes

In Part 1 of this series we covered the simple installation and configuration of VMware vRealize Log Insight. In Part 2 we will cover how we can further configure and customise Log Insight via Content Packs in order to leverage further logging capabilities.

As mentioned in Part 1, one of the caveats of utilising this ‘free’ version of Log Insight (or more aptly, the 25 OSI license available to all vCenter Server licensees), is the ability to use VMware-only Content Packs. This is far from a bad thing and, as a result, enables us to integrate with other VMware products including NSX, Horizon, SRM, etc. In this article we will focus on the former product.

Continue reading → VMware vRealize Log Insight: Part 2 – VMware NSX Integration via Content Packs

vRealize Log Insight Logo

VMware vRealize Log Insight: Part 1 – Install & Configuration

Reading Time: 5 minutes

If, like most of us, you forward vCenter and ESXi host Syslog data to centralised Syslog targets (and if you don’t, then I’d advise you do), then you’ll be pleased to hear that (as long as you have a valid vCenter Server license) you’ll be able to utilise the power of VMware vRealize Log Insight to interrogate this data.

This article will be the first in a two part VMware vRealize Log Insight series, the first of which will detail the simple installation and configuration process, with the second article focusing on advanced configuration and integration with VMware NSX via vRealize Log Insight Content Packs (vRealize Log Insight add-ins enabling further integration with both VMware and 3rd party products).

Continue reading → VMware vRealize Log Insight: Part 1 – Install & Configuration