Most Helpful Review
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
We were able to see what devices are talking to each other, giving us more visibility.
It has helped us tighten our security posture. Now, staff can only access things that they should be accessing.
The Adaptive Intention Engine is fantastic. It allows us to develop security policies using the language of our internal customers. It's machine-learning applied to security workflows. That allows us to much more easily construct the policies that will protect those workflows.
...It takes the exact same policies that you would apply to your on-premise environment and enables you to simply apply them to the cloud. It becomes one policy for both on-prem and for the cloud.
ShieldX has been designed from the very beginning to work well in cloud environments. It understands autoscaling, automation, and auto-configuration. These are the things which are important in today's operating environment.
It has reduced the number of people on the network team along with the system engineer involved in the security process. So, it is valuable.
From a distributed firewall perspective, it's a solid solution.
Their technical support is good. It's a complex solution and they're there to help with anything that comes up.
Their technical support is very good. They help us figure out solutions when we have problems.
The initial setup was straightforward. It follows a certain structure and you won't miss a step. It's all on the same level, step by step.
We like that everything is integrated.
You can easily integrate this with other VMware products. It is a robust solution.
The firewall is its most valuable feature.
I would like better reports and in-depth reporting.
We are having some issues with their LDAP and integrating it with the Active Directory. We can't seem to set it up.
With any kind of tool like ShieldX, where you're in the cloud instead of a traditional firewall, you're using CPU resources in those environments to provide the protection. So there's a cost associated with CPU resources. I'm pressing upon them to make the product much more efficient and use less CPUs to do the same thing.
They need to be consistent in performance and capabilities over time, given the fact that this is new and I want to see where this goes in the next year or so. As the vendor continues to evolve and add future functionality, we want to make sure that we are still keeping up with the integrations, etc. Time will be the key factor here. The proper support for some of the latest technologies, Docker containers, etc. They need to keep up with threat landscape, so we will see how the security get layered. This is what we are going to be keeping an eye on.
We would to have a reverse proxy. This would add great value to the solution.
We would like better integration with the standards on the market. For example, with OSPF, their integration in NSX is very low. It's not a full OSPF integration. It is too thin from a protocol perspective.
It's not channel-friendly because it's very complex. VMware wants to be very involved because they don't want the partner to mislead an end user with that state of the art technology.
The initial establishment can be complex.
I would like them to make integration with other vendors easier.
The solution is complex but for the key user, it's not really complex. You just need to learn the standards and mechanics for your specific product.
If you're worried that NSX is too complex, I would tell you to take another look. If you compare NSX to a similar solution you might find it to be a bit more complex. Usually, the guy that comes in to implement NSX isn't the network guy and will lack the knowledge for the program. He can lack the knowledge for this program and will therefore think it's complex. You need somebody with network experience.
We would like tenant segmentation available in future releases.
Pricing and Cost Advice
For other security professions who are looking for something which is low in cost that does microsegmentation, they should look at ShieldX. It might not be the big name out there, but it does everything that you are looking for in microsegmentation at a very low price.
ShieldX also enables us to migrate to cloud environments faster. That is an important part of it for sure because it takes the exact same policies that we would apply to our on-premise environment and enables us to simply apply them to the cloud. It becomes one policy for both on-prem and for the cloud.
ShieldX ensures that we can have the separation needed for our environment to avoid drastically increasing the cost on the licensing side. From this perspective, it's been very positive and helpful.
We are very happy with the pricing and licensing. It's about getting a site-wide license. One of the challenges that we've had with our previous vendor had been the cost of licensing.
We are actually expecting our costs to drop in the coming year, but it is just a matter of the licensing expiring. That is going to happen in the next six months or so. Then, we will start to see a decrease in overall spend.
Security policies are now applied as applications are going up. Because it's automated, we don't have the three to four week delay. The insertion of applications in the cloud for us dropped from an average of three to four weeks to a couple of days.
We can't go without NSX, so it's invaluable from this perspective.
The solution is very expensive.
We haven't had to hire a dedicated network engineer because NSX handles 90 percent of it. The reduced overhead in terms of managing networks has been the biggest plus.
We have saved man-hours and decreased our security exposure.
out of 14 in Cloud and Data Center Security
Average Words per Review
out of 14 in Cloud and Data Center Security
Average Words per Review
Compared 36% of the time.
Compared 35% of the time.
Compared 9% of the time.
Compared 32% of the time.
Compared 13% of the time.
Compared 7% of the time.
Also Known As
|APEIRO, ShieldX APEIRO||VMware Nicira|
The ShieldX Elastic Security Platform dynamically scales to deliver comprehensive and consistent controls to protect data centers, cloud infrastructure, applications and data no matter where they are or where they go to make the cloud more secure than on-premise deployments. Our frictionless approach leverages agentless technology as well as the ShieldX Adaptive Intention Engine which autonomously translates and enforces intention into a set of comprehensive controls - microsegmentation, firewall, IPS and more - making security the easiest thing you do in the cloud.
|VMware NSX is the network virtualization platform for the Software-Defined Data Center (SDDC). By bringing the operational model of a virtual machine to your data center network, you can transform the economics of network and security operations. NSX lets you treat your physical network as a pool of transport capacity, with network and security services attached to VMs with a policy-driven approach.|
Learn more about ShieldX
Learn more about VMware NSX
|Iowa State University||City of Avondale, Lumeta, Kroll Ontrack, Heartland Payment Systems, Baystate Heallth, Exostar, Tribune Media, iGATE, NTT Communications, Synergent, California Natural Resources Agency, Bloomington Public Schools, Columbia Sportswear, Join Experience S.A, Schuberg Philis|
No Data Available
Financial Services Firm11%
Software R&D Company36%
Comms Service Provider15%