{"slug": "vmware-vdefend-claims-75tbps-distributed-firewall-throughput-in-broadcom-vcf-9-1", "title": "VMware vDefend Claims 75Tbps Distributed Firewall Throughput in Broadcom VCF 9.1 Update", "summary": "Broadcom released updates for VMware vDefend and VMware Avi Load Balancer in VMware Cloud Foundation 9.1, claiming distributed firewall throughput up to 75Tbps per instance, a 241% increase on 100GbE NICs. The updates add a 1-2-3 deployment workflow for Advanced Threat Prevention, on-premises malware sandboxing, air-gapped support, and native API protection for VMs, Kubernetes, and AI workloads. Broadcom also reported distributed IDPS performance up to 17Gbps per server, an 89% increase, based on internal tests from July 2026.", "body_md": "Broadcom has issued updates for VMware vDefend and VMware Avi Load Balancer, enhancing security, performance, deployment, and automation features for [VMware Cloud Foundation 9.1](https://www.storagereview.com/news/vmware-cloud-foundation-9-1-positions-private-cloud-as-the-home-for-enterprise-ai) environments. These updates include vDefend SSP 5.2, vDefend 9.1.1, Avi Load Balancer 32.1.4, and the vDefend and Avi Conversion Tool 3.0.\n\nThe updates focus on private cloud deployments where IT teams implement distributed security controls across virtual machines, Kubernetes services, AI infrastructure, and application APIs. Broadcom frames these releases within a multi-layer model integrating east-west microsegmentation, intrusion prevention, malware analysis, web application firewall features, API security, and application delivery.\n\n## Faster vDefend Deployment and Expanded On-Premises Security\n\nThe vDefend Security Services Platform adds a 1-2-3 deployment workflow for Advanced Threat Prevention. This process reduces the operational work needed to deploy threat prevention services by providing a guided path for policy assessment, rule recommendations, and deployment.\n\nThe workflow integrates with vDefend Distributed Firewall, using workload-level visibility to assess security posture and recommend segmentation policies. The goal is to shorten deployment timelines for advanced threat prevention and reduce manual policy creation by security teams.\n\nBroadcom also added on-premises malware prevention through local sandboxing. Static and dynamic malware artifacts can be analyzed within the customer environment without sending data to a cloud service. This option suits organizations with data sovereignty, regulated data, or isolated environment requirements.\n\nAll vDefend capabilities now support air-gapped environments. Broadcom said threat intelligence can be updated offline, allowing disconnected environments to receive current threat data while maintaining network isolation.\n\n## Native API Protection for VMs, Kubernetes, and AI Workloads\n\nAvi Load Balancer now adds native API protection for VMs, vSphere Kubernetes Services, and AI workloads. This combines web application firewall controls with API protection, creating a WAAP capability to identify exposed APIs, apply protections, and improve application-layer visibility.\n\nAPIs have become a common attack surface in private cloud deployments, especially as applications decompose into microservices exposed through Kubernetes-based services. Integrating API protection with Avi Load Balancer can reduce the number of separate security products needed to protect application traffic while keeping policy enforcement close to the load balancing and application delivery layer.\n\n## Higher Distributed Firewall and IDPS Performance\n\nBroadcom also reported higher throughput figures for vDefend Distributed Firewall and Distributed Intrusion Detection and Prevention System deployments.\n\nFor Distributed Firewall, Broadcom cites throughput up to 22Gbps on servers with 25GbE NICs, a 129 percent increase, and up to 75Gbps on systems with 100GbE NICs, a 241 percent increase. At scale, Broadcom reports Distributed Firewall throughput up to 75Tbps per VMware Cloud Foundation instance.\n\nThe company also increased distributed IDPS performance up to 17Gbps per server, an 89 percent increase. Broadcom reports scale-out IDPS throughput up to 17Tbps per VCF instance. All performance figures are based on internal Broadcom test results from July 2026.\n\nThese capabilities support virtual patching at the workload layer. Distributed IDPS can inspect traffic and block exploit attempts within the hypervisor layer, providing compensating control while organizations test and deploy software patches. This is especially relevant for AI infrastructure and other data-heavy environments where lateral traffic volumes can be substantial.\n\n## Reduced SSP Footprint and Avi Throughput Gains\n\nvDefend SSP 5.2 introduces a two-node deployment model. Broadcom said this configuration can reduce the physical infrastructure needed to operate SSP by up to 33 percent while retaining lateral segmentation functionality.\n\nAvi Load Balancer also receives scale-out performance improvements. Broadcom reports up to 12.25Tbps throughput per controller instance, an 88 percent increase. For large application environments, this targets higher application delivery density without proportional expansion of load balancing infrastructure.\n\n## AI Assistant and Firewall Migration Automation\n\nBoth vDefend Distributed Firewall and Avi Load Balancer now include an AI Assistant to simplify administration, troubleshooting, and remediation workflows. Broadcom did not provide implementation details but positioned it as an embedded tool to reduce operational complexity in security and load balancing operations.\n\nThe updated vDefend and Avi Conversion Tool, vACT 3.0, adds migration capabilities for moving from legacy agent-based firewalls to vDefend Distributed Firewall. The tool automates elements of firewall policy migration and reduces the effort of transitioning to a distributed, hypervisor-based segmentation model.\n\nThe new features are compatible with VMware Cloud Foundation 9.1.", "url": "https://wpnews.pro/news/vmware-vdefend-claims-75tbps-distributed-firewall-throughput-in-broadcom-vcf-9-1", "canonical_source": "https://www.storagereview.com/news/vmware-vdefend-75tbps-distributed-firewall-vcf-9-1-update", "published_at": "2026-08-06 15:10:22+00:00", "updated_at": "2026-08-09 13:41:57.495569+00:00", "lang": "en", "topics": ["ai-infrastructure", "ai-products", "ai-policy"], "entities": ["Broadcom", "VMware vDefend", "VMware Avi Load Balancer", "VMware Cloud Foundation 9.1", "vDefend SSP 5.2", "Avi Load Balancer 32.1.4", "vDefend and Avi Conversion Tool 3.0"], "alternates": {"html": "https://wpnews.pro/news/vmware-vdefend-claims-75tbps-distributed-firewall-throughput-in-broadcom-vcf-9-1", "markdown": "https://wpnews.pro/news/vmware-vdefend-claims-75tbps-distributed-firewall-throughput-in-broadcom-vcf-9-1.md", "text": "https://wpnews.pro/news/vmware-vdefend-claims-75tbps-distributed-firewall-throughput-in-broadcom-vcf-9-1.txt", "jsonld": "https://wpnews.pro/news/vmware-vdefend-claims-75tbps-distributed-firewall-throughput-in-broadcom-vcf-9-1.jsonld"}}