Trend Micro Deep Security 9 on its way
During VMworld 2012 in San Fransisco Trend Micro announced the next version of their hypervisor based security product. They announced a lot of new and cool features and improvements which are probably gonna make into the final product.
I just got a demo at the Trend Micro booth here at VMworld in Barcelona and it look very promising.
(Please remember that the product is not released yet. Things may change before it is generally available.)
vSphere and Cloud support
Deep Security 9 supports vSphere 5.1 and vCloud Networking and Security 5.1. Next to the support for vSphere 5.1 there is also support and integration for vCloud Director and Amazon cloud services.
De-cluttering of the interface
Before version 9 you could only protect virtual machines and servers with the agent. There was no way to protect the hypervisors integrity. That posed a problem, since access to the hypervisor makes it a lot easier to hack the VMs that are running on top of it. With DS9 you can protect the hypervisor by using Intel TPM/TXT on the host.
In Deep Security 8 recommendation scans were only possible if you had the agent installed in the virtual machine. That meant that often servers were protected by agent, because you had to install it for the recommendation scan. For virtual desktop deployments it meant that you had to create a VM on which you did the recommendation scan before you could apply it on a security profile. In DS9 Recommendation scans can now be performed on agentless VMs as well. The only DS9 feature that still needs an agent is Log Inspection.
The expected release date is Q4 2012.