540 likes | 1.62k Views
Trend Micro Deep Security Performance, ROI, Pricing. Harish Agastya. Director of Datacenter Security Mktg Warren Wu, Director of Alliances. Selling Agentless Anti-malware Target Customer. Organization: VMware customers, both server and desktop Server: Upgrading to vSphere 4.1 from 3.x/4.0
E N D
Trend Micro Deep SecurityPerformance, ROI, Pricing Harish Agastya. Director of Datacenter Security Mktg Warren Wu, Director of Alliances
Selling Agentless Anti-malwareTarget Customer • Organization: VMware customers, both server and desktop • Server: Upgrading to vSphere 4.1 from 3.x/4.0 • Desktop: Considering VMware View (or Citrix on vSphere) • Buyer: Virtualization Project Manager / IT Security • Stage of Virtualization Journey: All, but stage 2 in particular • Key issues to look for: • Resource contention / AV storms • Security concerns holding back virtualization • Consolidation of Tier 1 apps HOT BUTTON
Deep Security Agentless Anti-malware Today, with Deep Security 7.5 Previously Agent Agent Agent Virtual Appliance vSphere vShield Endpoint • Faster performance: Freedom from AV Storms • Higher consolidation: Inefficient operations removed • More manageable: No agents to configure, update, patch • Stronger security: Instant ON protection + tamper-proofing
Tolly Report • Third party lab test of DS Agentless AV • with traditional AV • Symantec Endpoint Protection 11.0 and McAfee VirusScan Enterprise 8.7 were tested • Symantec/McAfee consumed more virtual system resources (CPU, Memory, Disk) in both idle and storm conditions • Symantec/McAfee could not scale to support over 25 desktop VMs/host • Tolly Group report projects that Trend can support 2-3 times desktop VM density as these other solutions. • Report is hosted on www.trendmicro.com/virtualization as well as on Tolly.com
Tolly Report“Idle Load” Results • All tests observed % consumption over baseline for each resource at 25, 50, 75 and 100 desktop VMs • On average: Symantec and McAfee consumed 1.7 to 8.5 times the Trend Micro resource overhead – even when idle
Tolly Report“Full Scan Storm” Load • At 25 VMs: Symantec and McAfee depicted ‘storm’ symptoms with resource usage from 3.4 times to 12 times as DS AV. • Symantec & McAfee could not be tested beyond 25 desktop VMs • DS AV was endorsed • as being able to support • 100 VMs per host
Tolly Report“Pattern Update Storm” Load • Like full scans, pattern updates also led to AV storms with Symantec and McAfee • Again, McAfee consumed about 3.6 times the CPU and Symantec consumed 3 times the RAM of DS AV.
Tolly ReportVM Density Comparisons Nominal VM Density (Assuming Idle load) Trend density = 29-43% higher True VM Density (Factoring AV storm avoidance) Trend density = 106-274% higher = 2 times to 3.75 times (On server VMs, same level of resource efficiency = 40-60% improvement in true density.)
Tolly ReportKey takeaways • Symantec and McAfee consumed significantly more resources than Trend Micro even when essentially idle • During full scans, Symantec and McAfee succumbed to AV storms and consumed 3-12 times as many resources as Trend Micro • Symantec and McAfee could not run beyond 25 desktop VMs/host while Trend Micro was endorsed at 100 desktop VMs/host. • Due to lower resource consumption and AV storm avoidance, Trend Micro can support 2-3 times the VM density of Symantec and McAfee.
TCO Overview • Total Cost of Ownership (TCO) cost model based on VMware’s own ROI TCO calculator • Tolly Group test data (up to 3X higher VM density) used to calculate additional savings • Higher density = Lower # of ESX servers • TCO savings typically much greater than cost of Deep Security • $157 per desktop VM • $454 per server VM
Consolidation Results in Capex, Opex Savings Servers Servers Storage Storage Network Network Facilities Facilities AFTER VMware BEFORE VMware 1,000 Direct attach 3000 cables/ports 200 racks 400 power whips 80 Tiered SAN and NAS 400 cables/ports 10 racks 20 power whips • Removing McAfee or Symantec agent enables further reduction in ESX server hosts (e.g. 80 to 74) • We don’t improve utilization, capex of Storage, Networking
VMware Online ROI TCO Calculator - Transparent cost assumptions http://roitco.vmware.com Different calculator for servers vs desktops Region-specific cost assumptions
VMware Consolidation Calculation Only one input needed - # of servers or desktops to virtualize VMware computes initial VM density • VMware model (~1.5 VM’s per core) may be higher than typical customer VM density – varies widely on age of hardware, type of workload • 6:1, 12:1, 24:1, 80:1 server ratios all can be good, depends on # of HW sockets, cores • Deep Security % savings valid at any starting consolidation ratio!
VMware Capex, Opex Opex = Datacenter Power, Cooling, Rackspace Capex = ESX Server HW
Deep Security increases consolidation up to 3X • Nominal agent footprint at idle • AV storms during scheduled scans – cost avoidance Deep Security Anti-malware Traditional Antivirus DS Anti-malware Cost avoidance = not seen in actual current VM density, what cust sees is AV storms disappear
Whitepaper Walks Through Calculation • Typical 3-Year Savings of $157 / desktop, $454 / server • Can be customized with regional cost assumptions from VMware • % savings is constant, per-VM will be higher if consolidation ratio is lower DSAM TCO Savings VMware TCO Assumptions
Getting to Positive ROI, Short Payback • ROI = TCO Savings / (DSAM Total Price) • Price, savings incremental from existing McAfee or Symantec agent • Factor in price of vShield Endpoint when applicable • ESX Capex/Opex savings >> DSAM price = positive ROI • 80% of savings is upfront capex = payback period < 1 year DSAM TCO Savings VMware TCO Assumptions
Key Takeaways • You don’t need to be an expert on VMware consolidation - cost model is transparent and based on familiar VMware model online • TCO whitepaper available for customers, channel partners – walkthrough of typical desktop and server scenarios • Increased consolidation savings >> cost of switching from McAfee or Symantec to Deep Security
Current Deep Security Pricing Model • Deep Security Manager • Deep Security Modules
Proposed Deep Security Pricing Model • Deep Security Manager • One instance included with DS Module purchase • Deep Security Modules
Thank You! Harish Agastya Warren Wu