• The first day is almost closing, great sessions, thousands of VMs and Hands on Labs, vBreakfast, vLunch, vBeers. Reunited with old friends, made some new ones. In summary, an awesome day and this is only the beginning! Where do we go from here? I mean that literally, don’t even think that I am going to solve your cloud migration problems right now. Tonight there are several activities, for most of them you will need a reservation or sponsor, but I guess you always know someone that knows someone, right? (except for the Mayweather bout) Here is a list to a few of the networking opportunities:

    1. IGEL, Login VSI & Nutanix Exclusive Happy Hour
    2. Dell/VMware/NVIDIA Channel Partner Dinner at Seafood at Mandalay Bay.
    3. VMware Latin America reception

    I will see you all tomorrow walking around, collecting swag and learning everything I can. ENJOY!

  • VMworld 2017 Day One General Session

    This morning we woke to a couple of announcements from VMWare, first VMware on AWS is available on a By-The-Hour basis and also the new AppDefense security offering. At the main session, Pat welcomes a crowd of 20k+ participants and takes a minute to ask for help in any way to the victims of Hurricane Harvey. Every day across everything we do, touch, and see technology is changing the way we experience our surroundings. Changes in technology aim to create higher value jobs, not about bringing old jobs back. VMware’s vision of any device, any application, any cloud spans across all aspects of our life is now more pertinent with things like IoT, and it tries to get the users and apps closer and closer by delivering those apps in a simple but secure way. When listening to Capital One

    By listening to Capital One, we can confirm that most companies now technology companies. That their business could be banking, food or marketing, but every company has to be a technology company to be able to reach the users in more efficient ways.  From VMware’s https://cloud.vmware.com/vmc-aws we get what is VMware Cloud on AWS: “VMware Cloud on AWS is an on-demand service that enables you to run applications across vSphere-based cloud environments with access to a broad range of AWS services.” Some of the use cases for this new offering are:

    1. Test and Development: without a massive capital investment you can start working in little time on new projects.
    2. Migrate applications on-prem to off-prem and back, use this to grow only when needed and pay only for that time.

    The pricing at this stage is as On Demand and pay only for what you use, later more offerings will be available.

    The new security offering, AppDefense, is based on the NSX software defined networking platform. A new approach is needed to protect the apps and data. AppDefense is application focused, and it will identify and capture the behavior of the application, in this way it will be able to determine problems with it. After detecting anomalies, it will also be able to take actions (automated) depending on what is happening. This process is called “Capture Good”. One neat topic that came up is Cyber Hygiene. VMware published a new paper on it, and these are what VMware calls the five pillars:

    1. Least Privilege
    2. Micro-Segmentation
    3. Encryption
    4. Multi-Factor Authentication
    5. Patching

     

    2017-08-28 10.01.25
    Pat Gelsinger and Cyber Hygiene

     

    You can find the paper here.

    NSX is the key that glues it all together. I’ve been coming to VMworld for three years now, and every year I meet more and more people with NSX as part of their environments. It all answers to the need of agility and rapid growth. I’ve heard this too many times now: go fast or it will pass by you.

     

  • Assessment Led Selling

    Assessment Led Selling

    One on the most important gains at VMware Partner Exchange is learning how to approach a client to help them achieve their goals and solve their problems. We all know that we should lead with a solution and not a product, but to design the right solution we need a good understanding of their environment and a clear view of the need. With an assessment of the customer’s environment, we will have a better view of their system and may even find things that they are not aware of.

    Leading the sales with an assessment means using tools, health checks, observations, and interviews to enable the sale of a solution.

    Let me summarize why we should lead with an assessment.

    1. Shortens the sales cycle by removing the objections to the solution that the client may think will not apply to their environment.
    2. Increase your value as a trusted advisor by providing insight into the customer’s system that sometimes not even themselves know about.
    3. Demonstrate the value of the solution with actual data and not just hypothetical cases.
    4. Quantifies the benefits of the solution and amplifies the potential deal size.

    Two examples of assessments that I use are:

    It is important that the process is one in which all stakeholders are part of the assessment. The technical operations personnel will provide the devices and will facilitate the installation, and all executive level people will provide the budget.

     

  • vExpert, VMworld, and I

    vExpert, VMworld, and I

    VMworld 2017 here we go! I am so happy to be back this year, flying in on Friday this time to sit on the PEX Workshops. I am refreshing all my NSX knowledge this Saturday.

    As a technology enthusiast, I like to write about what I do, the things I design, implement and especially those problems that I find and that there is no official documentation on how to solve them.
    Here I have a few study guides, some tricks of the trade and from time to time I share my opinion on current topics. When I learned that VMware had a program called VMware vExpert, I decided to apply. This program helps me sharing my knowledge and multiplies my effort in contributing back to the community.

    The VMware community is something special; you can request assistance from a lot of great engineers out there. There is a certain camaraderie among all the users, vExperts, employees and everyone that in some form is related to VMware that feed the community and brings it all together. One of my favorites is the vBrownBag (https://vbrownbag.com/) community that meets weekly and is a great contributor during VMworld each year.

    For me, VMworld provides a stage to grow as a professional. Each year I select the sessions that will provide me and ABS the most advantage taking into consideration our current client base, my knowledge gaps and what we think is the direction and possible adoption of new technology.

    The VMware vExpert program supports the community by providing access to the software via evaluation licenses. It helps with private channels and forums, and honestly, it is cool to have a group that gives you the feeling that you belong and that you are giving something back. The program provides a lot of training not only about VMware products but also about the integration with everything the different companies use every day on to of their vSphere environment.

    To apply to be a vExpert the most notable feat is to have a hunger for learning and sharing. If you feel awesome when you write a blog about the things that you do then in your heart you are good prospects.

  • Top vBlog 2017!

    Top vBlog 2017!

    It is voting time! Eric Siebert (find him at vSphereland) has this annual vBlog survey and for the first time, my site is listed this year. If you think that my blog has benefitted you (even to help you go to sleep) please take a minute to cast your vote. Find vWannabe.com (Javier Rodriguez) in the Top 50 and Top Independent categories. Thanks!

    vote-button1-300x298

  • VMworld 2017

    VMworld 2017

    Here we go again, is that time of the year when thousands of IT wizards get together in one of the most intense conferences about virtualization, cloud and all the technologies that are shaping our world. You still have time to register: VMworld 2017. I wanted to write a quick few lines to help you get the most out of this event. In my experience, this is a great opportunity to grow as a professional and enjoy everything Las Vegas has to offer.

    Tip #1: Partner Workshops

    If you work for a partner and you are planning on participating in both the general conference and the partner activities, then plan to arrive on Friday. The cost of the flight is even less than arriving Saturday or Sunday and the hotel is so inexpensive that it’s worth it. By arriving Friday you’ll have the opportunity to participate in one of the forty partner workshops offered during Saturday.

    Tip#2: Engage the Experts

    There will be several opportunities to get one on one with VMware employees that work on a daily basis with different technologies like EUC, Automation, Software Defined, you name it. Make the most out of this time, it is like free money! The time spent here will benefit your solutions and plans for your IT department and organization.

    Tip#3: Hands on Labs

    If you don’t participate on these it would be like visiting Universal Studios, FL and not going into the Harry Potter rides. The trick with these is to schedule your labs and workshops the day the registration opens because the available seats are limited. In any case, don’t give up and go get signed on the waiting lists when you get there because some people like to drink and gamble too much and never show up.

    Tip#4: Plan your sessions

    There is so much to learn that it can be overwhelming. Take time to schedule the sessions base on your technical level and interests. Pay attention to the more prominent presenters, like Duncan, because these sessions fill really fast.

    Tip#5: Solutions Exchange

    Bring one extra duffle bag to take back home all the goodies. There are a lot of prices, some are really nice like the raspberry pie I got last year from Datrium.

    Tip#6: Don’t Worry about the food

    There is food everywhere and the scheduled meals are awesome.

    Tip#7: Let the party start!

    In my opinion, VEAM has a great party and make sure you don’t miss the VMware’s customer appreciation event. If you are a vExpert please stop by the reception to meet VMware’s CEO and other important leaders. Remember to work out your social schedule, there is a lot going on at night.

    Tip#8: Enjoy!

  • VMware Network Virtualization (NSX)

    Three years ago I was participating in VMworld, VMware’s yearly event, and when the question came up about how many people were using NSX, just a few hands raised. One year later more than half of the people present at VMworld were raising their hands. Then and there, that was the moment when I realized that my lifelong avoidance of the network part of the Datacenter was over.

    In the old days, I decided that I could stay on one side of my imaginary (and simplistic) view of the Datacenter. You could be part of the Operating Systems, Database, Servers, Storage, or Networking team, maybe two of them, but that was it. If you tried to cover too much ground you would become a Jack of all trades and master of none.

    Fast forward to 2017 and we are talking about convergence and hyper-converge. We are virtualizing the storage, the network, the clouds, even your pets (just Google it). With that view in sight, my theory of silos in terms of the knowledge I needed is defeated. I need to learn network design and architecture, but I don’t want to do it the old way, I want to get on board with the new wave, I want to do it with virtualization and including the cloud. Taking this into consideration there is no better way to do it than with VMware’s NSX Virtualization Platform.

    When I presented the test for my VCP-DCV, it was a different time. The IT industry was just coming out of the .com bubble and they were worried about technologies that promised a lot and may not achieve much. Now with the VCP-NV I have twice the experience and I really don’t want to get into another race to the bottom, so I certainly think that it is very promising.

    But everything is not peaches and cream, with the VCP-NV certification comes the network. It is not just another VMware product, this is real network design and architecture. You will have to understand the different layers, routing protocols, and edge services. There is some serious studying to be done, and some of the knowledge needed to achieve this certification comes with experience.

    be-amazingThis VMware certification will give you an edge over your competitors. You just can’t keep ignoring the way the market is going, but don’t forget that it is not the end, network virtualization is only a way of getting the stumbling blocks out of the way of your applications.

  • Technology Silos: Why and How Engineers Should Drift Out of Their ‘Lanes’

    We find ourselves in the midst of a market where technologies are converging and the requirement to provide a complete data center solution always includes multiple disciplines. Furthermore, we used to address the data center through silos in terms of network, storage, servers, virtualization and operating systems, but now the same team must manage most of these skills. This question applies to other technology silos outside of the data center as well. Is it better to have one resource with a wide range of knowledge or is it better to have a specialist for each vertical? Furthermore, how do we solve this dilemma?

    Culture:  I prefer to take a holistic approach to problem-solving which ultimately provides a better experience for my clients. Personally, I believe for a team to be able to execute upon this idea together, this lies in the hands of leadership and the capacity of a few individuals to empower others to provide a complete solution or service to clients. Thus, I have chosen to be a part of an engineering team that spans multiple technologies and our leadership provides the inspiration and vision to support them. This enables the team to present a unified approach with the expertise needed to help clients reach their goals and solve their business challenges. It’s easy to see that a culture which fosters the idea that engineers should cross lanes into other technologies will continue to become more and more of a necessity in the IT industry moving forward.

    Certifications:  To support this mentality, engineers should not only maintain a constant pulse on innovations across the industry, but they should also invest the time to pursue certifications across various technologies. Technical certifications provide clients assurance that an individual or the company that is executing work is qualified. It also allows engineers to apply multiple perspectives throughout the process of addressing a client’s needs. Achieving multiple certifications is also important because it shows your employer that you care enough about clients, your profession and your future growth that you were willing to spend the time, money and effort on furthering your education.

    Where Do You Begin?  Once the culture has been addressed (if needed) setting out to pursue certifications can seem daunting. There are hundreds of certifications, ranging from professional certifications that take years to achieve to online certificates that you can complete in 30 minutes. Some are product specific while others focus on a specific technology. In my 20 years of experience, I’ve had quite a few certifications; I make this little joke about how I am an “expert” in so many things nobody uses anymore. What mostly motivated me to achieve them was the direction my company was going and the solutions we provided to our clients. I realized that there was something new out there that I had to get on board with or I would be left behind and my current expertise would become obsolete. For me, this technology was virtualization – specifically with vSphere from VMware. It was like an epiphany. When I experienced the way you could consolidate and move workloads across physical environments without any downtime, I knew that there was no way back, that this would be a disruptive technology with huge momentum. I can say now, after investing ten years of my time, it was the right decision but not my last as I continue to maintain a pulse on new technologies as I continuously search for the next new thing to invest my time in.

    In order to make the decisions to pursue education of various silos of technology for the betterment of myself and to provide better client services, I needed to be well-versed as to what was occurring in the industry to stay ahead of the curve, remain open-minded to learning new things, a part of culture that fosters cross-technology education, and of course, I needed to possess the willingness to put in the work. I’m convinced that focusing on this throughout my career has served me very well, but more importantly, it has served my clients well as I have been able to provide a holistic approach to solving business challenges from a technology perspective for decades.

  • Mi Camino

    Mi Camino

    Llevo mucho tiempo pensando en como hacer el Camino de Santiago (Francés). Yo quiero empezar en St. Jean Pied dePort en Francia, y caminar las 515 millas hasta Santiago, y si tengo tiempo llegar al fin del mundo (Finisterre).

    camino-frances-map

    El primer paso en tan grande aspiración es el plan. Como todo en la vida se necesita salud, dinero y tiempo. Confiado en Dios que dará salud para llegar, y dado que me va a tomar unos años ir (lo que significa que tengo tiempo para ahorrar dinero), vamos a hablar del tiempo.

    Estoy planificando mi Camino para terminar en Santiago el 25 de junio del 2021, en este año la fiesta de Santiago es celebrada en domingo. Tomando en cuenta que son 515 millas (830km) y que tengo 26 días (36 con los fines de semana) de vacaciones (que las pueda tomar todas de corrido será una lucha para otro día), tendría que caminar 16-18 millas (25 – 28 km) diarias. Esto tomando en consideración dos días al principio y dos días al final para viajar y dejando un día realengo para algún evento sorpresa. La distancia actual con la que me siento cómodo es de 7 a 12 millas, y nunca he caminado por varios días de corrido. Así que una vez tenga el equipo tengo que ponerme a entrenar.

    El segundo punto en la planificación es el equipo. Mi equipo lo estoy adquiriendo poco a poco, entre Walmart, Amazon y REI. Pienso que los mas importante son los zapatos y las medias. Luego de hacer un estudio de las opciones encontré dos zapatos que me funcionan. Estos son:

    • Salomon Men’s XA Pro 3D CS WP Trail Running Shoe ($115)

    salomon

    • La Sportiva Synthesis Mid GTX Men’s Ultralight Hiking Boot ($186)

    lasp

    Me gusta mas La Sportiva porque se vé menos bodrogo, ambos son muy cómodos, resistentes al agua y tienen el sistema de amarrar que es fácil.

    Las medias que me han funcionado mejor hasta ahora son las “WRIGHTSOCK CoolMesh“, también estoy experimentando con “Merino Wool“, y un día me puse la de lana sobre la Wrightsock, pero el zapato me apretó un poco, así que si encuentras que esa es la solución para evitar la lesiones entonces planifica comprar el zapato un poco mas grande. La ventaja de comprar en REI es que tiene garantía y los puedes llevar a cambiar.

    El próximo artículo que es bien importante es el backpack. Hay tantas opciones y tantos blogs que al final del día decidí ir personalmente a REI y pedir consejo. Esto fue lo mejor que hice porque allí me midieron el torso y pude probar varios modelos. Recuerda que aunque es un largo caminar, es diario. Es decir, que al final del día tienes todo lo que necesitas como comida, cama y puedes lavar tu ropa de ser necesario. Luego de explicarle al encargado la razón por la que quería adquirir un backpack, llegamos a un modelo de tamaño correcto. El backpack debe ser liviano, de 35 a 45 L, donde se pueda cargar como de 20 a 30 libras (aproximadamente el 10% de tu peso). Este fue el modelo que llenó los requisitos y que también esta en mi presupuesto: Osprey Stratos 36 Pack junto con el aditamento para el agua: Osprey Hydraulics LT Reservoir – 2.5 Liters

    back

    Bueno hasta ahora eso es lo que tengo, voy a probarlo con un par de caminatas de mas de 10 millas a ver como me va. La ropa debe ser de secado rápido y muy liviana, encontré que la ropa interior, camisas y pantalones Under Armour pesan sólo onzas y es muy cómoda. Compré en amazon una toalla de microfibra (Beach Towel) para probar como se siente y como seca.

    Es bien importante que al escoger el resto de equipo siempre tener en cuenta que mientras más liviano mejor. Entre el agua y en backpack ya son 8 libras, solo me quedan 12-20 libras más y todavía no he contado la cámara o el teléfono. Esta es una lista que todavía tengo en proceso de lo que necesito:

    • Pasaporte, tarjeta de crédito, cash.
    • Bolsas impermeables: para organizar dentro del backpack
    • Bolsa para Laundry: por si comparto la lavadora con otros caminantes.
    • Adaptador para el teléfono (o la cámara).
    • Kit para dormir: no puedo dormir cuando la gente esta roncando a mi lado 🙂
    • Jabón, cepillo de dientes y pasta, desodorante, etc.
    • Aleve, Advil o Tylenol.
    • Jacket que sea impermeable y también proteja del frío en las mañanas.
    • Sunscreen
    • Gorra o sombrero impermeable
    • Sleeping Bag Liner con protección contra insectos: chinches en los albergues es común, según lo que he leído.
    • Algún tipo de prevención de ampollas (blisters) en los pies.
    • Pequeña linterna.

    Poco a poco iré modificando la lista y espero algún día escribir una pequeña reseña sobre qué funcionó o que me hizo falta.

    UPDATE

    Cumplí mi sueño, caminé a Santiago de Compostela en Agosto del 2018. Viajé de Baltimore (BWI) a Paris haciendo escala en Iceland y de vuelta fue Madrid-Germany-BWI. Desde Paris viajé a Biarritz en avión usando Easyjet y luego nos fuimos en taxi de Biarritz a SJPP. EL viaje en taxi para tres costó 99 euros. Caminamos desde SJPP al pié de los Pirineos en Francia hasta una etapa antes de Logroño en el mapa que está al principio de este post. De Logroño tomamos transportacion en bus y tren hasta Piedrafita (la parada del bus antes de O’Cebreiro) y luego caminamos hasta Santiado de Compostela. También pasamos un día en Madrid al final. La pregrinación fué mágica, la mejor experiencia de mi vida. Usé las zapatillas La Sportiva y no tuve problemas, siempre usaba Leukotape cuando sentia “hot spots”. Pienso que me hicieron flata unos buenos Walking Poles, me dolian (duelen 6 meses después) las rodillas mientras bajaba. Todo el equipo que llevé fué muy útil, excepto la linterna y los libros guía. En agosto no necesitaba el jacket porque estaba super caliente y además tuve la suerte de que nunca llovió. Me gasté menos de $3000 por persona, incluyendo toda la transportacion, visitas al Prado, un tatuaje de $240 y una glotonería increible porque fuí con mis hijos adolescentes que comían cinco veces al día. Viví una fantasía en la tierra, no puedo esperar a volver.

  • CCNA Cyber Ops – 6.0 Attack Methods

    This is the last of a series of posts about the CCNA Cyber Ops certification, you can find the fifth part here.

    6.1 Compare and contrast an attack surface and vulnerability: The attack surface of a software environment is the sum of the different points (the “attack vectors”) where an unauthorized user (the “attacker”) can try to enter data to or extract data from an environment. A vulnerability is a weakness which allows an attacker to reduce a system’s information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw.

    6.2 Describe these network attacks

    • 6.2.a Denial of service: (DoS attack) is a cyber-attack where the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the Internet.
    • 6.2.b Distributed denial of service: A distributed denial-of-service (DDoS) is a cyber-attack where the perpetrator uses more than one, often thousands of, unique IP addresses.
    • 6.2.c Man-in-the-middle: an attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other.

    6.3 Describe these web application attacks

    • 6.3.a SQL injection: is a code injection technique, used to attack data-driven applications, in which nefarious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker).
    • 6.3.b Command injections: Command injection is an attack in which the goal is the execution of arbitrary commands on the host operating system via a vulnerable application. Command injection attacks are possible when an application passes unsafe user supplied data (forms, cookies, HTTP headers etc.) to a system shell.
    • 6.3.c Cross-site scripting: (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted web sites.

    6.4 Describe these attacks

    • 6.4.a Social engineering: An attack based on deceiving end users or administrators at a target site. Social engineering attacks are typically carried out by email or by contacting users by phone and impersonating an authorized user, in an attempt to gain unauthorized access to a system or application.
    • 6.4.b Phishing: Phishing is misrepresentation where the criminal uses social engineering to appear as a trusted identity.
    • 6.4.c Evasion methods: bypassing an information security device in order to deliver an exploit, attack, or another form of malware to a target network or system, without detection.

    6.5 Describe these endpoint-based attacks

    • 6.5.a Buffer overflows: is an anomaly where a program, while writing data to a buffer, overruns the buffer’s boundary and overwrites adjacent memory locations.
    • 6.5.b Command and control (C2): the term refers to the influence an attacker has over a compromised computer system that they control.
    • 6.5.c Malware: short for malicious software, is any software used to disrupt computer or mobile operations, gather sensitive information, gain access to private computer systems, or display unwanted advertising.
    • 6.5.d Rootkit: is a collection of computer software, typically malicious, designed to enable access to a computer or areas of its software that would not otherwise be allowed (for example, to an unauthorized user) and often masks its existence or the existence of other software.
    • 6.5.e Port scanning: probing a server or host for open ports.
    • 6.5.f Host profiling: Identifying groups of Internet hosts with a similar behavior or configuration.

    6.6 Describe these evasion methods

    • 6.6.a Encryption and tunneling: One common method of evasion used by attackers is to avoid detection simply by encrypting the packets or putting them in a secure tunnel.
    • 6.6.b Resource exhaustion: A common method of evasion used by attackers is extreme resource consumption, though this subtle method doesn’t matter if such a denial is against the device or the personnel managing the device. Specialized tools can be used to create a large number of alarms that consume the resources of the IPS device and prevent attacks from being logged.
    • 6.6.c Traffic fragmentation: Fragmentation of traffic was one of the early network IPS evasion techniques used to attempt to bypass the network IPS sensor.
    • 6.6.d Protocol-level misinterpretation: Attackers also evade detection by causing the network IPS sensor to misinterpret the end-to-end meaning of network protocols.
    • 6.6.e Traffic substitution and insertion: is when that attacker attempts to substitute payload data with other data in a different format, but the same meaning. A network IPS sensor may miss such malicious payloads if it looks for data in a particular format and doesn’t recognize the true meaning of the data.
    • 6.6.f Pivot: refers to a method used by penetration testers that use the compromised system to attack other systems on the same network to avoid restrictions such as firewall configurations, which may prohibit direct access to all machines.

    6.7 Define privilege escalation

    Privilege Escalation is the act of exploiting a bug, design flaw or configuration oversight in an operating system or software application to gain elevated access to resources that are normally protected from an application or user.

    6.8 Compare and contrast remote exploit and a local exploit

    A remote exploit works over a network and exploits the security vulnerability without any prior access to the vulnerable system. A local exploit requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator.

    Well, that is all for now and please, don’t open that link on your inbox if you don’t know who the sender is.