 capabilities available in OpenStack and other cloud integration environments, providing north-south and east-west protections for the cloud. Security function vir- tualization (SFV) is the hallmark of ASTRA. SFV is a key enabler for ASTRA to enable dynamic and intelligent security protections required by the workload in a cost-effective and right-sized manner. As explained earlier, part of today's security challenge stems from the fact that classic perimeter no longer truly exists or has become SO porous that it often feels as though it no longer exists. The need to communicate information with partners, the use of mobile bring your own device (BYOD), and more sophisticated advanced persistent threat (APT) attacks are some of the key contributors to ASTRA Astra Platform Features Security Policy Intelligence Orchestration Build & Config Logging Monitoring User Interface Event Reporting FIGURE 9.17 ASTRA architecture features. Network Security this breakdown. This already complicated problem is being further exasperated by corporate man- dates to move their IT services into the cloud-where traditional security protections were never designed adequately to protect critical business systems. ASTRA attempts to provide the tools and technologies to help solve this difficult challenge. This is explained in more detail in the next section. 9.5.3.2 ASTRA System Overview The functional ASTRA architecture is depicted in Figure 9.18. The ASTRA architecture can be broken down into multiple layers loosely partitioned into ASTRA Core and ASTRA Satellite. The ASTRA core environment is an integrated platform purposely architected to provide a rich set of command and control systems to manage enterprise and service provider sized cloud com- puting environments. The ASTRA core platform provides mission critical capabilities needed to effectively manage cloud-based security including Intelligent creation of security polices and controls Enabling auditing of security polices Acquiring and maintaining cloud object inventory Orchestra