
vShield API Programming Guide
10 VMware, Inc.
vShield Edge
AvShieldEdgevirtualapplianceprovidesnetworkedgesecuritytoprotectthevirtualmachinesinavCloud
tenant’snetworkfromattacksoriginatingfromthepublicnetwork.ThevShieldEdgeconnectstheisolated,
privatenetworksofcloudtenantstothepublicsideoftheserviceprovidernetworkthroughcommonedge
servicessuch
asDHCP,VPN,NAT,andloadbalancing.
YouinstallavShieldEdgefromthevShieldManager.YoucaninstallonevShieldEdgeinstancepertenantport
grouponavNetworkDistributedSwitch(vDS).YouconfigureavShieldEdgebyusingRESTAPI.
vShield Endpoint
vShieldEndpointoffloadsantivirusandanti‐malwareagentprocessingtoadedicatedsecurevirtual
appliancedeliveredbyVMwarepartners.Sincethesecurevirtualappliance(unlikeaguestvirtualmachine)
doesnʹtgooffline,itcancontinuouslyupdateantivirussignaturestherebygivinguninterruptedprotectionto
thevirtualmachinesonthehost.Also,
newvirtualmachines(orexistingvirtualmachinesthatwentoffline)
areimmediatelyprotectedwiththemostcurrentantivirussignatureswhentheycomeonline.
vShield Data Security
vShieldDataSecurityprovidesvisibilityintosensitivedatastoredwithinyourorganizationʹsvirtualizedand
cloudenvironments.BasedontheviolationsreportedbyvShieldDataSecurity,youcanensurethatsensitive
dataisadequatelyprotectedandassesscompliancewithregulationsaroundtheworld.
Compatibility Between Different REST API Versions
EachreleaseofthevShieldRESTAPIrepresentsanewversionoftheRESTAPIcodewithnewandchanged
features.IfyouarerunningapreviousversionofvShieldcomponentsoftware,youmightnotbeabletouse
allofthefeaturesofthelatestreleaseofthevShieldREST
API.
REST API Version 2.0 in vShield 5.0
Release5.0ofvShieldintroducesversion2.0oftheRESTAPI.ManyURLschangedfromversion1.0to2.0.
YoucandeterminetheAPIversionofavShieldcomponent(suchasEdgeorApp)withthefollowingexample
RESTcalls.IntheGETrequestsyntax,<vsm-ip>representstheIPaddressor
hostnameofvShieldManager.
Example 1-1. Determine the API version of the vShield Manager or vShield Endpoint
GET https://<vsm-ip>/api/versions
<versions>
<version value="2.0">
<module name="Dlp" baseUri="/api/2.0/dlp" version="2.0"/><module name="EndpointSolution"
baseUri="/api/2.0/endpointsecurity" version="2.0"/><module name="IPSet"
baseUri="/api/2.0/services/ipset" version="2.0"/><module name="UserMgmt"
baseUri="/api/2.0/services/usermgmt" version="2.0"/><module name="MACSet"
baseUri="/api/2.0/services/macset" version="2.0"/><module
name="SecurityGroup" baseUri="/api/2.0/services/securitygroup"
version="2.0"/><module name="Application"
baseUri="/api/2.0/services/application" version="2.0"/>
</version>
</versions>
NOTEvShieldAppandvApparenotthesamething.AvAppisagroupingofvirtualmachinesinvSphere,
forexampleamanagementapplianceandadatabaseapplianceworkingtogether.
CAUTIONTheRESTAPIsdescribedinthisdocumentcanchangeovertime.Atthispoint,vShielddoesnot
guaranteeforwardcompatibility.
Commentaires sur ces manuels