Broadcom has rolled out new capabilities for VMware vDefend and VMware Avi Load Balancer aimed at strengthening multi-layer cyber defence for private cloud environments, as enterprises contend with AI-fuelled attacks that exploit vulnerabilities faster than traditional defences can respond.

The updates, delivered through vDefend SSP 5.2, vDefend 9.1.1, Avi Load Balancer 32.1.4 and the vDefend and Avi Conversion Tool (vACT) 3.0, are compatible with VMware Cloud Foundation (VCF) 9.1 and target enterprises running workload security at scale.

Faster threat prevention, on-prem and air-gapped

Broadcom introduced a streamlined three-step deployment framework, vDefend 1-2-3, that pairs Advanced Threat Prevention with Distributed Firewall to cut deployment time from months to weeks. On-premises malware sandboxing and full air-gapped support mean highly sensitive environments can now run vDefend’s full capability set without connecting to the cloud.

“As AI-fuelled cyberattacks and vulnerability exploits redefine the threat landscape, a fragmented security approach is no longer an option,” said Umesh Mahajan, vice president and general manager, Application Networking and Security Division, Broadcom.

API protection and performance gains

Avi Load Balancer now includes native API protection for virtual machines, vSphere Kubernetes Services and AI workloads, combining a web application firewall with API protection to close gaps attackers increasingly exploit to infiltrate private cloud environments.

• A leaner 2-node SSP deployment cuts hardware requirements by up to 33 per cent
• Distributed Firewall throughput rises to up to 75Gbps on 100G NIC servers, or up to 75Tbps scale-out per VCF instance
• Distributed IDPS performance climbs to up to 17Gbps per server for virtual patching against newly discovered vulnerabilities
• Avi Load Balancer scale-out throughput increases up to 88 per cent, to 12.25Tbps per controller instance

Both vDefend DFW and Avi Load Balancer now embed an AI Assistant to streamline troubleshooting and remediation, while the enhanced vACT tool automates migration from legacy, agent-based firewalls to Distributed Firewall.

“With prescriptive ATP 1-2-3 workflows in vDefend, we can efficiently implement virtual patching and advanced threat prevention in a matter of weeks, rather than many months,” said Nagaraj Reddi, VP of Technology, United States Senate Federal Credit Union.

Broadcom said the enhancements are designed to help enterprises defend data-heavy AI workloads without the cost and complexity of stitching together multiple disconnected security tools.