Name: Yoomi Hong, VMware
Uploaded: 2024-10-08T16:00:00.000Z
Duration: 14 min 19 s

Clips
More from theCUBE Research Deep Dive on VMware's Live Recovery

Yoomi Hong

Director of Product Marketing

VMware

Christophe Bertrand

Principal Analyst

SiliconANGLE & theCUBE

play_circle_outline Enhancing Cyber Resilience with Ransomware Prevention in VMware Cloud Foundation and Live Recovery

play_circle_outline Recent additions: RPO as low as one minute, Cybersecure Storage for faster recovery

play_circle_outline Future integrations with VCF, remote vSAN snapshot replication, on-premises recovery environment

20:56

Info
Transcript

Yoomi Hong, VMware

Yoomi Hong

Director of Product Marketing VMware

Christophe Bertrand

Principal Analyst SiliconANGLE & theCUBE

Yoomi Hong discusses cyber resilience and VMware Live Recovery as a key enabler for cyber-resilient VCF environments, highlighting the importance of multi-layered defense strategies for preventing and recovering from ransomware attacks. VMware Live Recovery offers unified management for addressing threats across different cloud environments, with features like bringing up workloads in an isolated clean room, live behavioral analysis, and end-to-end ransomware recovery workflows.Updates include reducing recovery time with Cybersecure Storage and on-premises ra... Read more

explore Keep Exploring

What features does VMware Cloud Foundation offer to help customers build a cyber-resilient private cloud and defend against ransomware attacks? add

What are some of the key capabilities and features introduced in the release of VMware Live Recovery in March? add

What are the key themes and announcements related to VMware Live Recovery? add

bolt Powered by CUBE AI

Yoomi Hong, VMware

Christophe Bertrand

>> Hello, everyone. Welcome to this CUBE conversation. Today, we're going to be talking about a hot topic, one of my favorites, with Yoomi Hong from Broadcom. Yoomi, welcome.

Yoomi Hong

>> Thank you for having me today.

Christophe Bertrand

>> Tell us about what you do and what we're going to talk about.

Yoomi Hong

>> Yeah. So I am in the product marketing organization within Broadcom, and I head up the Product Marketing teams for our core infrastructure products, including vSphere, vSphere Kubernetes service, Private AI, vSAN, Data Services Manager, and VMware Live Recovery.

Christophe Bertrand

>> Excellent, so live recovery. We're going to be talking about disaster recovery, about ransomware as well. Clearly, you have a very broad portfolio. And maybe some of our viewers are asking themselves, "Okay, VMware Live Recovery, how does that fit in the portfolio?" And maybe, can you put this in contrast with where it fits in essentially the VMware Cloud Foundation solution?

Yoomi Hong

>> Yeah, absolutely. So when we talk to our customers, cyber resilience is a topic that is top of mind for virtually all of our customers, regardless of their size or the industry that they're in. And so building a cyber-resilient private cloud is a top priority for our customers, and that's one of the things that VMware Cloud Foundation aims to deliver. And so as a platform overall, we have a multi-layered approach because any robust ransomware defense plan has to have a multi-layered approach to both prevention and recovery. And so at the infrastructure layer, VMware Cloud Foundation comes hardened out of the box. We have features such as identity federation, live patching to address vulnerabilities quickly and in a manner that is non-destructive and centralized. We have data at rest and data in transit, encryption, compliance monitoring, so all of these capabilities ensure hardening at the platform level. And then, when it comes to preventing the attacks from happening, we have our advanced networking and security products that deliver strong distributed lateral security, advanced threat prevention, avoidance of data exfiltration, things that are critical to preventing the ransomware attacks from getting into the environment in the first place, and then to make sure that we're detecting it and containing it as quickly as possible. And then, of course, it's essential to have recovery measures in place. And this is where VMware Live Recovery comes in, and it's a key enabler for the cyber-resilient VCF environment serving as that critical last line of defense in case an attack does come through. Because recovering from an attack is actually a very complicated task these days. And so we allow customers to securely and confidently recover from what has now become an existential threat.

Christophe Bertrand

>> Absolutely. So you brought up a couple of very important points. I like the fact that you talked about not just data corruption potentially or data destruction, but also the possibility of data exfiltration. So these are very hot topics. But let's zoom in on the recovery piece of it. That's really the fun part here for me. And I like to geek out on these type of feature functions. You've already mentioned quite a bit, but I'm curious about what it does exactly in terms of feature functions. I'm an end user. I'm a customer. You've hinted at a couple of capabilities. How would you define the core features and benefits? And again, maybe compare and contrast with other disaster recovery measures you have in place already.

Yoomi Hong

>> Yeah, absolutely. So VMware Live Recovery is a ransomware and disaster recovery solution, and we've brought together various technologies within the VMware portfolio to help customers securely and quickly recover from these types of threats. We deliver all of this in a unified management experience so they can address ransomware recovery or disaster recovery use cases. They can protect their environments across different clouds, whether that be on-premises or in the public cloud. And we have a unique set of features that help customers recover from ransomware attacks and especially, the modern forms of ransomware that are prevalent today. And so we're able to bring up the workloads in an isolated clean room, run those workloads using embedded live behavioral analysis of those workloads, and we automate all of this with an end-to-end ransomware recovery workflow. And when it comes to disaster recovery, we have enterprise-scale DR orchestration as well. We've also drastically simplified the consumption experience for our customers. All of these capabilities are available with a single subscription. And we've also added flexibility within the licensing structure as well, where customers can, for example, start up with an on-premises disaster recovery capability, and then maybe mid-subscription. They want to adopt the cloud for cloud-based ransomware recovery or disaster recovery. And we make it seamless for customers to do that with a single subscription.

Christophe Bertrand

>> Well, this is really interesting because I think there are a couple of very important points here. The first one I want to bring up is, of course, disaster recovery is one thing, and it used to be predictable in a sense. You could see that hurricane coming. Well, when it comes to ransomware, you don't know what, when, and what the consequences will be, so having this clean room environment to be able to practice, and more importantly, the ability to have those different workflows because those are different workflows. Let's not kid ourselves here.

Yoomi Hong

>> Right.

Christophe Bertrand

>> I think that's absolutely key. The other point I want to bring up for our viewers is... And I'd like to really double-click on that. And maybe we'll do that through customer examples, but the truth is, the simplification of licensing and the flexibility you offer in how you can then configure or reconfigure the way you're going to come back from what may be an existential threat to your business. I think that's absolutely key and something that really I think will shine clearly with customers. So talking about customers, obviously, you have a couple million.

Yoomi Hong

>> Yes. Yes.

Christophe Bertrand

>> You have a lot of customers. So I'd love for you to give us some examples specifically in this context of disaster recovery and ransomware recovery. What have you seen in the field?

Yoomi Hong

>> Yeah, absolutely. So a customer we have is one of the largest retailers in Ukraine actually named Fozzy. And when the war broke out, they needed a way to transfer all of their data outside of Ukraine and protect them outside of Ukraine in case there's a disruption due to wartime or there are natural disasters. And this is where we were able to help the customer out with VMware Live Recovery, replicating hundreds of terabytes of data to the cloud in a matter of one to two weeks, and delivering RPOs that are as low as 15 minutes.

Christophe Bertrand

>> Well, that's very impressive, amazing, and unfortunately, everybody will know what this is all about. I think it couldn't be a better example or worse example depending on how you look at it. Look, I think that at the end of the day, it's all about recoverability, which is exactly what you've identified here. You mentioned RPOs, RTOs, obviously. There's plenty here to worry about from an economic standpoint, from an SLS standpoint. You've recently added a number of new capabilities. You mentioned some of the workflows, some of the networking capabilities. Can you walk us through some of the recent additions to the portfolio in terms of capabilities and specifically, focus them again on disaster recovery and the ransomware recovery components?

Yoomi Hong

>> Yep, absolutely. So one major release that we did was actually around the general availability of VMware Live Recovery in March, where we're unifying the different technologies that we have within our portfolio. And with that, we announced a set of capabilities as well. One of them is RPO as low as one minute with vSphere replication for on-premises disaster recovery, so significantly reducing the RPO. And then also, we introduced the capability for customers to protect the same workload with on-premises DR and cloud-based ransomware recovery. And so that was another major announcement that we made. And also recently, we added a really cool feature. One that we actually previewed in Barcelona last year called Cybersecure Storage. And this is where we are leveraging local vSAN snapshots, so snapshots that customers can create in their local vSAN data store. We've integrated VMware Live Recovery and the cyber recovery capabilities that come with it. And the benefit of doing this is that we're able to drastically reduce the recovery time because we auto-identified the best baseline local snapshots to recover from. So instead of transferring all the data back from the cloud, customers can now use the local snapshots to recover from cyberattacks. And so we are able to reduce the recovery time by up to 16x.

Christophe Bertrand

>> Oh, wow. 16x.

Yoomi Hong

>> Yes. Yeah.

Christophe Bertrand

>> Okay. You had me with the RPO, but now you're... 16x is very good. What I think this brings up is a couple of points. First of all, there is definitely a place for a hybrid strategy here. I think this is very clear to me. The first line of defense could be on-prem. It's fine. It's really not a problem. And of course, leverage the cloud as much as you can. Those are very, very smart ways of doing it. Look, we're almost at the time when Explore is going to be upon us. It's coming soon. I know you have a few things that you're going to be announcing. So can you walk us through what will be announced in the September time, sorry, end of August timeframe? It's coming up soon.

Yoomi Hong

>> Yes. Yep, absolutely. So two key themes when it comes to VMware Live Recovery announcements. One is we are integrating more tightly with the VCF platform because that helps deliver a unified experience for our customers, and it also takes advantage of some of the product synergies that exist, case in point, the CyberSecure Storage feature. And so what we're doing is we're going to be extending the local vSAN snapshot capability to deliver remote snapshots with vSAN. And so remote vSAN to vSAN snapshot replication. And with that, customers will get a deeper history of immutable snapshots. They'll be able to leverage a unified appliance to manage those snapshots as well. And we will also support vSAN Max for greater storage efficiency as well as scalability. And this is a natural extension into our second announcement, which is about providing greater choice and flexibility to our customers. Because today, that isolated recovery environment is available on VMware Cloud on AWS, but a number of our customers have asked for their data to stay on-premises due to data privacy requirements or data locality requirements. So our announcement is really around doing ransomware recovery with an on-premises isolated clean room. And so with that, customers can now flexibly choose between an on-prem IRE or a cloud-based IRE and adhere to these data sovereignty requirements.

Christophe Bertrand

>> Well, quite a bit that you're working on here. So a couple of things that really get my attention here. Number one is you're definitely deepening as you're broadening the spectrum of capabilities, I think that's very key. The other point is I think this idea of compliance meets governance meets, obviously, recoverability is key, so I'm very pleased to see that you're adding these capabilities, the on-prem capabilities. But beyond that, I think it's a broader conversation around how do you maintain recoverability and really the business altogether regardless of the circumstances that may affect you. So I also assume there will be updates to the workflows and runbooks.

Yoomi Hong

>> Yes. Yeah, absolutely. So our vision is to be able to protect any vSphere-based environment and recover that to any vSphere-based environment. So you'll see us add more options for our customers. And there are a number of capabilities that we're working on as well. There's a capability that's in Tech Preview right now called Proactive Threat Detection, where we are leveraging the same concept but using that to proactively catch the malware before the encryption event actually occurs.

Christophe Bertrand

>> Oh, that's really great. And I think with the other capabilities, with a clean room, what you're really doing here is you're going along this framework one by one.

Yoomi Hong

>> Right.

Christophe Bertrand

>> More importantly, I think you're setting up your end users for the ability to test, which is maybe a best practice that people are forgetting about. The reality is, with all of these capabilities, there's really no excuse for not at least trying to test some of the potential attacks, the consequences, and whether the teams are ready because clearly the technology is. Yoomi, thank you so much for your time. This has been great.

Yoomi Hong

>> Thank you.

Christophe Bertrand

>> And have a great explore, and of course, great launches. And to our viewers, thank you so much for joining us for this CUBE conversation, and we'll see you soon.