Total workload count at the center of the pie chart under "Workloads, At-Risk Workloads, & Blast Radius" may differ from "Workloads" count in "Executive Summary" section of the Security Segmentation Report

Products

• VMware vDefend Firewall with Advanced Threat Prevention
• VMware vDefend Firewall

Issue/Introduction

Count labeled "Total workloads" at the center of the pie chart under "Workloads, At-Risk Workloads, & Blast Radius" in "Overview of Current State of Segmentation" section may differ from count labeled "Workloads" in "Executive Summary" section.

Count labeled "Total # of workloads" at the center of the pie chart under "Risky Application Protocols" in "Project: Secure Applications" section may differ from count labeled "Workloads" in "Executive Summary" section.

Environment

vDefend SSP >= 5.0

Cause

Count labeled "Total workloads" at the center of the pie chart under "Workloads, At-Risk Workloads, & Blast Radius" in "Overview of Current State of Segmentation" section may differ from count labeled "Workloads" in "Executive Summary" section.

"Total workloads" at the center of the pie chart is total of count of "Virtual Desktop Infrastructure Servers", "Infrastructure Servers" and "Application Workloads". In a datacenter, there might be some workloads which are identified in the report both as "Virtual Desktop Infrastructure Servers" and as "Infrastructure Servers" (VM with same identifier i.e. same NSX managed UUID or same internal IP).

While calculating the count at the center of pie chart, the report considers these overlapping workloads separately. In case of "Workloads" in "Executive Summary" section, the count is of unique workloads found in the datacenter i.e. union of all distinct workloads in the datacenter. Thus the count of the said two sections might differ.

 

 

Fig 1.  Illustrative figure above - "Workloads" in "Executive Summary" section

 

Fig 2. Count labeled "Total workloads" at the center of the pie chart under "Workloads, At-Risk Workloads, & Blast Radius" in "Overview of Current State of Segmentation" section

-----

Count labeled "Total # of workloads" at the center of the pie chart under "Risky Application Protocols" in "Project: Secure Applications" section may differ from count labeled "Workloads" in "Executive Summary" section.

In this case, the count labeled "Total # of workloads" at the center of the pie chart under "Risky Application Protocols" is the addition of the workload count for each of the top N risky application protocols. So this may differ from "Workloads" count which counts unique workloads in the datacenter.

 

Fig 3. Example "Workloads" in "Executive Summary" section

 

 

 

Fig4. Example of "Total # of workloads" at the center of the pie chart under "Risky Application Protocols" in "Project: Secure Applications" section

 

 

Resolution

There is no specific resolution and this article is for informational and awareness purposes.