WIXLIB

White PaperSimpliVity OmniStack withVormetric Transparent EncryptionPage 1 of 12www.SimpliVity.com

White PaperTable of ContentsExecutive Summary. 3Audience. 3Solution Overview. 3Simplivity Introduction. 3Why Simplivity For Virtualized Environments?. 5Vormetric Technology. 6Vormetric Transparent Encryption. 6Solution Overview. 7Customer Benefits. 7Solution Architecture. 8Topology. 8Testing Infrastructure. 8Technical Details. 9Testing Methodology. 9Vdbench Performance Test. 9Simplivity Operations And Feature Test. 10Vormetric Operation Test. 10Test Results. 11Vdbench. 11Simplivity Operation Results. 11Vormetric Operation Test Setup & Execution. 12Best Practices. 12Conclusion. 12Page 2 of 12www.SimpliVity.com

White PaperExecutive SummaryThis solution guide introduces SimpliVity OmniStack technology and Vormetric Transparent Encryption, as a combinedsolution that reduces security risks and helps to ensure compliance with regulatory requirements, while still deliveringsuperior application performance. It discusses the interoperability of both technologies through testing conducted bySimpliVity, in collaboration with Vormetric, and provides best practices and recommendations for implementing the solution.AudienceThis document is intended for IT administrators who want to implement a VM encryption solution running on SimpliVityOmniStack systems within their IT datacenter.Solution OverviewSimpliVity IntroductionSimpliVity’s hyperconverged infrastructure solution transforms the data center by virtualizing data and incorporating all ITinfrastructure and services below the hypervisor into standard x86 building blocks. With 3X total cost of ownership (TCO)reduction, SimpliVity OmniStack software-defined hyperconverged infrastructure delivers the best of both worlds: theenterprise-class performance, protection and resiliency that today’s organizations require, with the cloud economics businesses demand.Designed to work with any hypervisor or industry-standard x86 server platform, the SimpliVity solution provides a single,shared resource pool across the entire IT stack, eliminating point products and inefficient siloed IT architectures. The solution is distinguished from other converged infrastructure solutions by three unique attributes: accelerated data efficiency,built-in data protection functionality and global unified management capabilities. Accelerated Data Efficiency: OmniStack performs inline data deduplication, compression and optimization on all data atinception across all phases of the data lifecycle, all handled with fine data granularity of just 4KB-8KB. On average, SimpliVity customers achieve 40:1 data efficiency while simultaneously increasing application performance. Built-In Data Protection: OmniStack includes native data protection functionality, enabling business continuity anddisaster recovery for critical applications and data, while eliminating the need for special-purpose backup and recovery hardware or software. OmniStack’s inherent data efficiencies minimize I/O and WAN traffic, reducing backup andrestore times from hours to minutes. Global Unified Management: OmniStack’s VM-centric approach to management eliminates manually intensive, errorprone administrative tasks. System administrators are no longer required to manage LUNs and volumes; instead, theycan manage all resources and workloads centrally, using familiar interfaces such as VMware vCenter and VMwarevRealize Automation.SimpliVity packages OmniStack on popular x86 platforms—either on 2U servers marketed as OmniCube, or with partnersystems such as Cisco and Lenovo, marketed as OmniStack Integrated with Cisco UCS and OmniStack Solution withLenovo System x, respectively.Page 3 of 12www.SimpliVity.com

White PaperAn individual OmniStack node includes: A compact hardware platform - a 2U industry-standard virtualized x86 platform containing compute, memory, performance-optimized SSDs and capacity-optimized HDDs protected in hardware RAID configurations, and 10GbE networkinterfaces A hypervisor such as VMware vSphere/ESXi OmniStack virtual controller software running on the hypervisor An OmniStack Accelerator Card – a special-purpose PCIe card with an FPGA, flash, and DRAM, protected with supercapacitors; the accelerator card offloads CPU-intensive functions such as data compression, deduplication and optimization from the x86 processors.(4) Servers VMwareStorage Switch(2) HA Shared StorageBackup & Dedupe OneBuilding BlockTCO Savings Global Unified Management Operational EfficiencyWAN Optimization 3xCloud GatewaySSD ArrayStorage CachingEnterpriseCapabilitiesData Protection AppsCloudSimplicity &EconomicsFigure 1 – Legacy ComparisonPage 4 of 12www.SimpliVity.com

White PaperWhy SimpliVity for Virtualized Environments?OmniStack was specifically designed to meet the stringent price-performance, scalability, agility and resiliency demandsof today’s data-intensive, highly virtualized IT environments. Key benefits and advantages include: Simplicity and superior economics: OmniStack eliminates infrastructure cost and complexity by consolidating avariety of IT functions (compute, storage, network switching, replication, backup, etc.) onto commodity virtualized x86hardware, with global unified management. The solution contains CAPEX by eliminating IT silos, converging technology stacks, and optimizing storage capacity; and it reduces OPEX by containing power, cooling, rack space and systemadministration expenses. Linear scalability: The SimpliVity solution features a scale-out architecture that minimizes upfront investments and provides a high degree of flexibility and extensibility. OmniStack nodes are installed in an incremental fashion to accommodate growth, enable new applications or extend system availability. Two or more OmniStack nodes can be federated to create a massively scalable pool of shared resources that is administered as a cohesive system, with a singleadministrative interface. VM-centric design: OmniStack was designed from the ground up with virtualization in mind. The solution abstractsdata from the underlying hardware; virtual machine files are mapped directly to blocks on storage. All data storage,management, and protection functions are inherently optimized for virtualization. And all administrative tasks including managing data protection policies, analyzing performance and troubleshooting problems are all performed at theVM level. From an administrative perspective, a datastore is simply a logical construct, decoupled from the underlyingphysical infrastructure. Concepts like LUNs, volumes, shares, and disk groups simply don’t apply with SimpliVity. Accelerated IT service agility: OmniStack’s inherent data efficiencies and VM-centric management capabilities dramatically simplify operations and boost IT service agility. With OmniStack, system administrators can spin up IT servicesand clone VMs in just seconds with two or three mouse clicks. High resiliency: The SimpliVity solution is designed to be highly resilient, with no single point of failure. The solutionsupports both RAID (redundant array of independent disks) for disk-level resiliency and RAIN (redundant array of independent nodes) for node-level resiliency. In a high availability RAIN implementation, the complete set of data associated with a VM is simultaneously written to two distinct nodes, protecting data in the event of disk or node failures.Public CloudFigure 2 – An OmniStack FederationPage 5 of 12www.SimpliVity.com

White PaperVormetric TechnologyThe Vormetric Data Security Platform makes it efficient to manage data-at-rest security across an entire organization. Builton an extensible architecture, Vormetric Data Security Platform products can be deployed individually, while sharing efficient, centralized key management. With the platform’s comprehensive, unified capabilities, an organization can efficientlyscale to address expanding security and compliance requirements, while significantly reducing total cost of ownership.The Vormetric Data Security Platform delivers capabilities for transparent file-level encryption, application-layer encryption, tokenization, dynamic data masking, cloud encryption gateway, integrated key management, privileged user accesscontrol and security intelligence.With the solution, organizations can address security policies and compliance mandates across databases, files and bigdata nodes—whether assets are located in cloud, virtualized or traditional environments.Vormetric Transparent EncryptionThe Transparent Encryption solution involves the Vormetric Data Security Manager and transparent encryption agents.The Data Security Manager represents the central component of the Vormetric Data Security Platform, enabling the management of multiple Vormetric products. The software appliance offers centralized capabilities for storing and managinghost encryption keys, data access policies, administrative domains and administrator profiles.Vormetric Transparent Encryption features an agent that runs in the file system to provide high-performance encryption and least-privileged access controls for files, directories and volumes. This enables encryption of both structureddatabases and unstructured files. Unlike other encryption solutions, protection does not end after the encryption key isapplied. Vormetric continues to enforce least-privileged user policies to protect against unauthorized access by users andprocesses, and it continues to log access. With these capabilities, you can ensure continuous protection and control ofyour data.The product enforces granular, least-privileged user access policies that protect data from misuse by privileged users andadvanced persistent threat (APT) attacks. Granular policies can be applied by user (including for administrators with rootprivileges), process, file type, time of day, and other parameters. Enforcement options are very granular; they can be usedto control not only permission to access clear-text data, but which file-system commands are available to a user.The platform logs all permitted, denied and restricted access attempts from users, applications and processes. These logsare all captured in the Data Security Manager, enabling administrators to get detailed insights and to efficiently track security status. This also enables easy integration with security information and event management (SIEM) systems.Page 6 of 12www.SimpliVity.com