Difference between revisions of "Dell Technologies APEX"

From LIMSWiki
Jump to navigationJump to search
m
 
(One intermediate revision by the same user not shown)
Line 37: Line 37:
}}
}}


'''Dell Technologies Cloud''' is a VMware-powered portfolio of consumption-based and as-a-service solutions by Dell Technologies that "delivers consistent management across private, public and edge cloud infrastructure—so you can choose the best environment for each application and use case."<ref name="DellTechCloudTake">{{cite web |url=https://www.delltechnologies.com/en-us/cloud/dell-technologies-cloud.htm |title=Dell Technologies Cloud - Take control of your cloud |publisher=Dell Technologies |accessdate=25 April 2021}}</ref> Solutions include Dell Technologies Cloud Platform (DTCP), VMware Cloud on Dell EMC, VxRail, and VxBlock.<ref name="DellConsumptionGet">{{cite web |url=https://www.delltechnologies.com/en-us/cloud/dell-technologies-cloud/consumption-options.htm |title=Consumption Options - Get more choice, flexibility and predictability in how you consume IT infrastructure |publisher=Dell Technologies |accessdate=25 April 2021}}</ref> The Dell Technologies Cloud solutions support the Alibaba, Amazon, Google, IBM, and Microsoft public clouds, among others.<ref name="DellEMCCloud">{{cite web |url=https://www.delltechnologies.com/en-us/data-protection/powerprotect-dd-series/cloud-tier.htm |title=Dell EMC Cloud Tier |publisher=Dell Technologies |accessdate=25 April 2021}}</ref>
'''Dell Technologies APEX''' is a VMware-powered portfolio of consumption-based and as-a-service solutions by Dell Technologies that "delivers multicloud by design, empowering you to optimize the placement of data and workloads for maximum value within your organization."<ref name="DellTechCloudTake">{{cite web |url=https://www.dell.com/en-us/dt/apex/resources/apex-cloud-experience-ebook.htm |title=Dell APEX - Get a more unified multicloud experience with technology you trust |publisher=Dell Technologies |accessdate=02 August 2023}}</ref> Solutions include Dell APEX Cloud Platform (DACP) for Azure, VMware, and Red Hat OpenShift; Dell APEX Hybrid Cloud for VMware; and Dell APEX Storage, among others.<ref name="DellConsumptionGet">{{cite web |url=https://www.dell.com/en-us/dt/apex/index.htm |title=Dell Technologies APEX |publisher=Dell Technologies |accessdate=02 August 2023}}</ref> The Dell Technologies APEX solutions support the Alibaba, Amazon, Dell, Google, IBM, and Microsoft public and private clouds, among others.<ref name="DellEMCCloud">{{cite web |url=https://www.dell.com/en-us/dt/data-protection/powerprotect-dd-series/cloud-tier.htm |title=Dell Cloud Tier |publisher=Dell Technologies |accessdate=02 August 2023}}</ref>


On May 5, 2021, Dell Technologies announced that it had rebranded its Dell Technologies Cloud platform to Dell Technologies APEX.<ref name="AgarwalAPEX21">{{cite web |url=https://www.dell.com/en-us/blog/apex-cloud-services-for-all-your-essential-workloads/ |title=APEX Cloud Services for All Your Essential Workloads |author=Agarwal, S. |work=Dell Blog |date=05 May 2021 |accessdate=01 August 2023}}</ref>
On May 5, 2021, Dell Technologies announced that it had rebranded its Dell Technologies APEX platform to Dell Technologies APEX.<ref name="AgarwalAPEX21">{{cite web |url=https://www.dell.com/en-us/blog/apex-cloud-services-for-all-your-essential-workloads/ |title=APEX Cloud Services for All Your Essential Workloads |author=Agarwal, S. |work=Dell Blog |date=05 May 2021 |accessdate=01 August 2023}}</ref>


==Provider research==
==Provider research==
Line 47: Line 47:
1. '''What experience do you have working with laboratory customers in our specific industry?'''
1. '''What experience do you have working with laboratory customers in our specific industry?'''


It's not clear what [[Laboratory|laboratories]] have adopted Dell Technologies Cloud solutions. However, Dell does discuss putting some of its cloud-scale systems to use in the laboratory realm with its solution brief on [https://www.delltechnologies.com/no-no/collaterals/unauth/briefs-handouts/solutions/h17973-uds-for-digital-pathology-solution-overview.pdf Dell EMC PowerScale]. A Dell Technologies Cloud representative is likely to be able to supply more examples of laboratories that use or have used Dell Technologies Cloud.
It's not clear what [[Laboratory|laboratories]] have adopted Dell Technologies APEX solutions. However, Dell does discuss putting some of its cloud-scale systems to use in the laboratory realm with its solution brief on [https://www.delltechnologies.com/asset/no-no/products/storage/briefs-summaries/h17973-uds-for-digital-pathology-solution-overview.pdf Dell EMC PowerScale]. A Dell Technologies APEX representative is likely to be able to supply more examples of laboratories that use or have used Dell Technologies APEX.




2. '''Can your solution readily integrate with our other systems and business processes, making it easier for our end users to perform their tasks?'''
2. '''Can your solution readily integrate with our other systems and business processes, making it easier for our end users to perform their tasks?'''


Dell promotes integration of existing legacy cloud and on-premises platforms with other private and public cloud platforms largely through its Dell Technologies Cloud Platform (DTCP) and strong VMware integrations. DTPC instances "deliver standardized combinations of compute (in some cases GPU/accelerators), memory, storage, and networking resources, on which a virtual machine or container can run. They are aligned and optimized to your workload requirements, ranging from small (4GB) to extra-large (32GB) memory-to-CPU core ratios."<ref name="DellIntroDTCP21">{{cite web |url=https://www.delltechnologies.com/en-us/collaterals/unauth/offering-overview-documents/products/dell-technologies-cloud/h18181-dell-technologies-cloud-platform-with-subscription-solution-brief.pdf |format=PDF |title=Introducing Dell Technologies Cloud Platform |publisher=Dell Technologies |date=2021 |accessdate=22 April 2021}}</ref> On the VMware side, the company adds that "VxRail, powered by Dell EMC PowerEdge server platforms and VxRail HCI System Software, delivers deep integration across the VMware ecosystem. This means you can rapidly deploy secure on-premises cloud infrastructure and take advantage of a full stack single-click lifecycle management experience."<ref name="DellIntroDTCP21" /> These technologies further enhance integration with business processes and systems by allowing for workloads to be seamlessly transferred between public and private cloud infrastructures. For more on this topic, discuss it with a representative.
Dell promotes integration of existing legacy cloud and on-premises platforms with other private and public cloud platforms largely through its Dell Technologies APEX Platform (DTCP) and strong VMware integrations. APEX instances have "standardized combinations of compute and memory resources—defined by a fixed physical memory-to-core ratio—and powered by Dell VxRail. They are optimized for your virtualized and containerized workload requirements, ranging from small (4GB/Core) to extra-large (32GB/Core) memory-to-CPU core ratios."<ref name="DellIntroDTCP21">{{cite web |url=https://www.delltechnologies.com/asset/en-us/solutions/apex/technical-support/h19142-apex-private-cloud-spec-sheet.pdf |format=PDF |title=Dell APEX Private Cloud |publisher=Dell Technologies |date=2023 |accessdate=02 August 2023}}</ref> On the VMware side, the company adds that "VxRail, powered by Dell PowerEdge server platforms and VxRail HCI System Software, delivers deep integration across the VMware ecosystem. This means you can rapidly deploy secure on-premises cloud infrastructure and take advantage of a full stack single-click lifecycle management experience."<ref name="DellIntroDTCP21" /> These technologies further enhance integration with business processes and systems by allowing for workloads to be seamlessly transferred between public and private cloud infrastructures. For more on this topic, discuss it with a representative.




3. '''What is the average total historical downtime for the service(s) we're interested in?'''
3. '''What is the average total historical downtime for the service(s) we're interested in?'''


Dell Technologies Cloud is not a public cloud, and as such, this question is not fully relevant. That said, Dell Technologies provides [https://www.delltechnologies.com/resources/en-us/asset/white-papers/products/storage/h18025-dell-emc-unity-faction-hdraas-solutions-guide.pdf disaster recovery as a service] for hybrid cloud platforms using its Dell Technologies Cloud Storage, VMware Cloud, and Dell EMC solutions, helping laboratories limit the repercussions of their public or private cloud going down.
Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. That said, Dell Technologies provides [https://www.delltechnologies.com/asset/sv-se/products/data-protection/briefs-summaries/H16867_data_domain_cloud_dr_sb.pdf disaster recovery as a service] for hybrid cloud platforms using its Dell Cloud Disaster Recovery and PowerProtect DD for helping laboratories limit the repercussions of their public or private cloud going down.




4. '''Do we receive comprehensive downtime support in the case of downtime?'''
4. '''Do we receive comprehensive downtime support in the case of downtime?'''


Dell Technologies Cloud is not a public cloud, and as such, this question is not fully relevant. However, Dell still provides support services for its service offerings. Per its [https://www.dell.com/learn/us/en/uscorp1/terms-conditions/dell-emc-cloud-services-terms-of-service Dell Technologies Cloud Services Terms of Service]:
Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. However, Dell still provides support services for its service offerings. Per its [https://i.dell.com/sites/csdocuments/Legal_Docs/en/us/dell-apex-compute-onpremises-sd-en.pdf Dell Technologies APEX service offering description], the "Dell APEX Service includes ... support from Dell for the Dell APEX Service," as described within the document. Be sure to confirm the support terms for the service you select.
 
<blockquote>Service Provider will provide support to Customer for the Service Offering in accordance with the applicable Support Terms as specified in the applicable Service Description. Service Provider will not provide support to Customer’s End Users or for Content of Customer or End Users.</blockquote>
 
Be sure to confirm the support terms for the service you select.




5. '''Where are your servers located, and how is data securely transferred to and from those servers?'''
5. '''Where are your servers located, and how is data securely transferred to and from those servers?'''


Dell Technologies Cloud is not a public cloud, and as such, this question is not fully relevant. That said, it will be useful to understand the underlying technology supplied by Dell in regards to data transmission to public and private cloud instances. Cloud-based [https://www.delltechnologies.com/en-hr/cloud/cloud-services/data-protection/index.htm data protection services] from Dell such as Dell Technologies Cloud for Data Protection and Dell Technologies Cloud PowerProtect for Multi-Cloud may be of additional interest.
Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. That said, it will be useful to understand the underlying technology supplied by Dell in regards to data transmission to public and private cloud instances. Cloud-based [https://www.dell.com/en-hr/dt/data-protection/cloud.htm data protection services] from Dell such as Kubernetes Data Protection, PowerProtect Cyber Recovery, Cloud Disaster Recovery, and more may be of additional interest.




6. '''Who will have access to our data (including subcontractors), and what credentials, certifications, and compliance training do they have?'''
6. '''Who will have access to our data (including subcontractors), and what credentials, certifications, and compliance training do they have?'''


Dell Technologies Cloud is not a public cloud, and as such, this question is not fully relevant. That said, Dell Technologies does state its policies on secure development of products and applications, stating<ref name="DellSecureDev">{{cite web |url=https://www.dell.com/en-us/shop/secure-development/cp/secure-development |title=Secure Development at Dell |publisher=Dell Technologies |accessdate=22 April 2021}}</ref>:
Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. That said, Dell Technologies does state its policies on secure development of products and applications, stating<ref name="DellSecureDev">{{cite web |url=https://www.dell.com/en-us/shop/secure-development/cp/secure-development |title=Secure Development at Dell |publisher=Dell Technologies |accessdate=02 August 2023}}</ref>:


* "Dell provides security training to employees on job-specific security best practices and policies to create a security-aware culture across its entire employee community."
* "Dell provides security training to employees on job-specific security best practices and policies to create a security-aware culture across its entire employee community."
Line 85: Line 81:
7. '''Will our sensitive and regulated data be stored on a machine dedicated to complying with the necessary regulations?'''
7. '''Will our sensitive and regulated data be stored on a machine dedicated to complying with the necessary regulations?'''


Dell Technologies Cloud is not a public cloud, and as such, this question is not fully relevant. However, as noted in the prior question, as well as Dell's [https://www.dell.com/en-us/lp/trusted-cloud compliance statement], the company attempts to embed strong data protection and compliance mechanisms into its offerings.
Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. However, as noted in the prior question, as well as Dell's [https://www.dell.com/en-us/lp/trusted-cloud compliance statement], the company attempts to embed strong data protection and compliance mechanisms into its offerings.




8. '''How segregated is our cloud data from another customer's, i.e., will lapses of security of another customer's cloud affect our cloud? (It typically won't, but asking the question will hopefully prompt the provider to better explain how your data is segregated.)'''
8. '''How segregated is our cloud data from another customer's, i.e., will lapses of security of another customer's cloud affect our cloud? (It typically won't, but asking the question will hopefully prompt the provider to better explain how your data is segregated.)'''


Dell Technologies Cloud is not a public cloud, and as such, this question is not fully relevant.
Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant.




Line 110: Line 106:
11. '''What are your policies for security audits, intrusion detection, and intrusion reporting?'''
11. '''What are your policies for security audits, intrusion detection, and intrusion reporting?'''


Dell Technologies Cloud is not a public cloud, and as such, this question is not fully relevant. That said, Dell's implementation of VMware Cloud Foundation in some of its cloud technologies allows for setting up firewall rules, antivirus scanning and intrusion detection in their hybrid cloud.<ref name="DellVMwareCloud21">{{cite web |url=https://www.delltechnologies.com/resources/en-us/asset/white-papers/products/converged-infrastructure/h17854-vmware-cloud-foundation-on-dell-emc-vxrail-wp.pdf |format=PDF |title=VMware Cloud Foundation on Dell EMC VxRail |publisher=Dell Technologies |date=February 2021 |accessdate=22 April 2021}}</ref>
Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. That said, Dell's implementation of VMware Cloud Foundation in some of its cloud technologies allows for setting up firewall rules, antivirus scanning and intrusion detection in their hybrid cloud.<ref name="DellVMwareCloud21">{{cite web |url=https://www.delltechnologies.com/asset/en-us/products/converged-infrastructure/industry-market/h17854-vmware-cloud-foundation-on-dell-emc-vxrail-wp.pdf |format=PDF |title=VMware Cloud Foundation on Dell VxRail |publisher=Dell Technologies |date=April 2023 |accessdate=02 August 2023}}</ref>




12. '''What data logging information is kept and acted upon in relation to our data?'''
12. '''What data logging information is kept and acted upon in relation to our data?'''


Dell Technologies Cloud is not a public cloud, and as such, this question is not fully relevant.
Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant.




13. '''How thorough are those logs and can we audit them on-demand?
13. '''How thorough are those logs and can we audit them on-demand?


Dell Technologies Cloud is not a public cloud, and as such, this question is not fully relevant. However, in its Dell Technologies Cloud Services Terms of Service (presumably for its SaaS services), Dell does mention that it<ref name="DellCloud20">{{cite web |url=https://www.dell.com/learn/us/en/uscorp1/terms-conditions/dell-emc-cloud-services-terms-of-service |title=Cloud Services Terms |publisher=Dell Technologies |date=01 June 2020 |accessdate=22 April 2021}}</ref> :
Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. However, in its Dell Technologies APEX Services Terms of Service (presumably for its SaaS services), Dell does mention that it<ref name="DellCloud20">{{cite web |url=https://i.dell.com/sites/csdocuments/Legal_Docs/en/us/cloud-service-offerings-agreement.pdf |title=Cloud Service Offerings Agreement |publisher=Dell Technologies |date=01 June 2020 |accessdate=02 August 2023}}</ref> :
 
<blockquote>monitors and collects telemetry data relating to Your use thereof. Dell may collect certain information related to the Service Offering through a telemetry collector (“Collector”). Such information may include, without limitation, diagnostics, configurations, usage data, performance, deployment location information, and system information sent to Dell automatically by Dell’s systems and tools (“System Data”).</blockquote>


<blockquote>monitors and collects configuration, performance, and usage data relating to Customer’s use of the Service Offering: (a) to facilitate delivery of the Service Offering (such as (i) tracking entitlements, (ii) providing support, (iii) monitoring the performance, integrity, and stability of the Service Offering’s infrastructure, and (iv) preventing or addressing service or technical issues); and (b) to improve Service Provider’s products and services, and Customer’s experience. Customer must not interfere with that monitoring.</blockquote>
However, it's not clear if customers can audit this data on-demand. Consult with a representative to learn more.




14. '''For HIPAA-eligible data (e-PHI) we may have, will you sign a business associate agreement?'''
14. '''For HIPAA-eligible data (e-PHI) we may have, will you sign a business associate agreement?'''


Dell Technologies Cloud is not a public cloud, and as such, this question is not fully relevant. That said, it's worth noting that the Dell Technologies Cloud Services Terms of Service actually mentions HIPAA, stating "Customer must not upload into the Service Offering any Content that: ... (e) constitutes information governed by HIPAA unless Customer has signed a Business Associate Agreement (as defined by HIPAA) with Service Provider."<ref name="DellCloud20" /> As such, if data and information governed by HIPAA gets stored on Dell Technologies Cloud machines, it sounds like yes, a business associate agreement will be signed.
Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. That said, it's worth noting that the Dell Technologies APEX Services Terms of Service actually mentions HIPAA, stating "If Customer is subject to the U.S. Health Insurance Portability and Accountability Act (“HIPAA”) and Customer has not executed a Business Associate Agreement (“BAA”) with Dell for the APEX Service, Customer acknowledges that the Dell BAA ... applies to Dell and Customer for the APEX Service."<ref name="DellCloud20" /> As such, if data and information governed by HIPAA gets stored on Dell Technologies APEX machines, it sounds like yes, a business associate agreement will be signed.




15. '''What happens to our data should the contract expire or be terminated?'''
15. '''What happens to our data should the contract expire or be terminated?'''


The company states in its Dell Technologies Cloud Services Terms of Service the following<ref name="DellCloud20" />:
The company states in its Dell Technologies APEX Services Terms of Service the following<ref name="DellCloud20" />:


<blockquote>Deletion of any Content remaining in the Service Offering will occur as specified in the applicable Service Description. As between Customer and Service Provider, Customer is responsible for ensuring that Customer has necessary copies of all Customer’s Content prior to the effective date of any termination.</blockquote>
<blockquote>If Customer has elected to terminate the Dell APEX Service at the end of Customer’s Subscription Term, Customer will have thirty (30) days from the time Dell notifies Customer and Customer’s Dell Channel Partner, as applicable, of its intent to pick up the Dell APEX System, or if no notice is provided, then thirty (30) days from the last day of the Subscription Term, as applicable, within which to delete Customer Content from the Dell APEX System. If the Subscription is terminated prior to the end of the term, Customer will have thirty (30) days from the time Dell notifies Customer and Customer’s Dell Channel Partner, as applicable, of termination, within which to delete Customer’s Content from the Dell APEX System.</blockquote>


For more clarity, discuss this with a Dell Technologies representative.
For more clarity, discuss this with a Dell Technologies representative.
Line 141: Line 139:
16. '''What happens to our data should you go out of business or suffer a catastrophic event?'''
16. '''What happens to our data should you go out of business or suffer a catastrophic event?'''


Presumably, if Dell goes out of business, you may have to return equipment, but not without first being able to back up data from that equipment first. You'll have to clarify this with a representative. As for catastrophic events, it appears you'll be responsible for "lost profits or business opportunities, loss of use of the service offering, or loss of content" in the case of failures, per the Dell Technologies Cloud Services Terms of Service.<ref name="DellCloud20" /> Read the Terms of Service and discuss with a representative to confirm.
Presumably, if Dell goes out of business, you may have to return equipment, but not without first being able to back up data from that equipment first. You'll have to clarify this with a representative. As for catastrophic events: "To the extent that Dell has any liability for loss of Customer Content, Dell will only be liable for the cost of commercially reasonable and customary efforts to recover the lost Customer Content from Your last available backup."<ref name="DellCloud20" /> Read the Terms of Service and discuss with a representative to confirm.




Line 151: Line 149:
18. '''Are your support services native or outsourced/offshored?'''
18. '''Are your support services native or outsourced/offshored?'''


It is unclear if support personnel are local to the customer or if support is outsourced to another business and country. Discuss this with a Dell Technologies Cloud representative.
It is unclear if support personnel are local to the customer or if support is outsourced to another business and country. Discuss this with a Dell Technologies APEX representative.


==Managed security services==
==Managed security services==
Dell doesn't appear to explicitly advertise "managed security services." Dell does, however, offer a standard managed services portfolio through its Dell Technologies Managed Services offering.<ref name="DellManServ">{{cite web |url=https://www.delltechnologies.com/en-us/services/managed-services/index.htm |title=Dell Technologies Managed Services |publisher=Dell Technologies |accessdate=27 May 2021}}</ref> One of the offerings in that managed services portfolio is "Dell Technologies Managed Detection and Response." Dell describes these services as "a fully managed, end-to-end, 24x7 service that monitors, detects, investigates, and responds to threats across the entire IT environment, helping organizations with 50 or more endpoints to quickly and significantly improve their security posture—while reducing the burden on IT."<ref name="DellManaged21">{{cite web |url=https://www.delltechnologies.com/en-us/collaterals/unauth/data-sheets/services/managed-detection-and-response-datasheet.pdf |format=PDF |title=Strengthen your security posture with Managed Detection and Response |publisher=Dell Technologies |date=2021 |accessdate=27 May 2021}}</ref> This managed service is described as having four components: agent rollout assistance, thread detection and investigation, response and active remediation, and remote cybersecurity incident response.<ref name="DellManaged21" />
Dell doesn't appear to explicitly advertise "managed security services." Dell does, however, offer a standard managed services portfolio through its Dell Technologies Managed Services offering.<ref name="DellManServ">{{cite web |url=https://www.dell.com/en-us/dt/services/managed-services/index.htm |title=Dell Managed Services |publisher=Dell Technologies |accessdate=02 August 2023}}</ref> One of the offerings in that managed services portfolio is "Dell Technologies Managed Detection and Response Pro Plus." Dell describes these services as a "fully-managed, 360° security operations solution [that] helps you prevent and respond to attacks and recover if a breach occurs."<ref name="DellManaged21">{{cite web |url=https://www.dell.com/en-us/dt/services/security-services/managed-detection-response-pro-plus.htm |format=PDF |title=Managed Detection and Response Pro Plus |publisher=Dell Technologies |accessdate=02 August 2023}}</ref> This managed service is described as having four components: agent rollout assistance, thread detection and investigation, response and active remediation, and remote cybersecurity incident response.<ref name="DellManaged21" />




Line 160: Line 158:


===Documentation and other media===
===Documentation and other media===
* [https://www.delltechnologies.com/en-us/collaterals/unauth/offering-overview-documents/products/dell-technologies-cloud/h18166-dell-technologies-cloud-modern-applications-solution-brief.pdf About Dell Technologies Cloud]
* [https://www.delltechnologies.com/asset/en-us/solutions/apex/technical-support/dell-acp-portfolio-solution-brief.pdf Dell Technologies APEX Cloud Platforms]
* [https://www.delltechnologies.com/en-us/collaterals/unauth/offering-overview-documents/products/dell-technologies-cloud/h18181-dell-technologies-cloud-platform-with-subscription-solution-brief.pdf About Dell Technologies Cloud Platform]
* [https://www.delltechnologies.com/asset/en-us/solutions/apex/technical-support/apex-compute-spec-sheet.pdf Dell Technologies APEX Compute]
* [https://www.delltechnologies.com/en-us/collaterals/unauth/analyst-reports/solutions/why-data-protection-matters-in-cloud-environments.pdf Hybrid cloud data security whitepaper]
* [https://www.delltechnologies.com/asset/en-us/solutions/apex/briefs-summaries/apex-block-services-solution-brief.pdf Dell Technologies APEX Data Storage Services Block]
* [https://www.delltechnologies.com/asset/en-us/solutions/apex/selling-competitive/apex-partner-conversation-guide.pdf Dell Technologies APEX Partner Conversation Guide]


===External links===
===External links===
* [https://www.dell.com/en-us/shop/secure-development/cp/secure-development Dell Technologies development and auditing practices]
* [https://www.dell.com/en-us/shop/secure-development/cp/secure-development Dell Technologies development and auditing practices]
* [https://www.delltechnologies.com/en-us/services/managed-services/index.htm Dell Technologies Managed Services]
* [https://www.delltechnologies.com/en-us/services/managed-services/index.htm Dell Technologies Managed Services]
* [https://corporate.delltechnologies.com/en-us/about-us/security-and-trust-center/index.htm#tab0=1 Dell Technologies trust center]
* [https://www.dell.com/en-us/dt/corporate/about-us/security-and-trust-center/index.htm Dell Technologies trust center]


==References==
==References==
{{Reflist|colwidth=30em}}
{{Reflist|colwidth=30em}}
<!---Place all category tags here-->
[[Category:Cloud computing services]]
[[Category:Managed security services]]

Latest revision as of 22:52, 28 February 2024

Dell Technologies APEX
Industry Computing, Cloud computing, Web services
Predecessor Dell, EMC Corporation
Founder(s) Michael Dell
Headquarters Round Rock, Texas, United States
Area served Worldwide
Key people Michael Dell (CEO)
Products IaaS, DBaaS, DaaS, SaaS
Revenue $25 billion (2023, Q4)[1]
Website delltechnologies.com/en-us/cloud/


Dell Technologies APEX is a VMware-powered portfolio of consumption-based and as-a-service solutions by Dell Technologies that "delivers multicloud by design, empowering you to optimize the placement of data and workloads for maximum value within your organization."[2] Solutions include Dell APEX Cloud Platform (DACP) for Azure, VMware, and Red Hat OpenShift; Dell APEX Hybrid Cloud for VMware; and Dell APEX Storage, among others.[3] The Dell Technologies APEX solutions support the Alibaba, Amazon, Dell, Google, IBM, and Microsoft public and private clouds, among others.[4]

On May 5, 2021, Dell Technologies announced that it had rebranded its Dell Technologies APEX platform to Dell Technologies APEX.[5]

Provider research

This section uses public information to provide some answers to the 18 questions posed in Chapter 6 of the wiki-based guide Choosing and Implementing a Cloud-based Service for Your Laboratory. In some cases, public information could not be found, and a recommendation to further discuss the question with the cloud service provider (CSP) is made. Additionally, as a hybrid cloud provider, some of the questions from Chapter 5 (e.g., "How segregated is our cloud data from another customer's") are not relevant, as they are not providing public cloud services.


1. What experience do you have working with laboratory customers in our specific industry?

It's not clear what laboratories have adopted Dell Technologies APEX solutions. However, Dell does discuss putting some of its cloud-scale systems to use in the laboratory realm with its solution brief on Dell EMC PowerScale. A Dell Technologies APEX representative is likely to be able to supply more examples of laboratories that use or have used Dell Technologies APEX.


2. Can your solution readily integrate with our other systems and business processes, making it easier for our end users to perform their tasks?

Dell promotes integration of existing legacy cloud and on-premises platforms with other private and public cloud platforms largely through its Dell Technologies APEX Platform (DTCP) and strong VMware integrations. APEX instances have "standardized combinations of compute and memory resources—defined by a fixed physical memory-to-core ratio—and powered by Dell VxRail. They are optimized for your virtualized and containerized workload requirements, ranging from small (4GB/Core) to extra-large (32GB/Core) memory-to-CPU core ratios."[6] On the VMware side, the company adds that "VxRail, powered by Dell PowerEdge server platforms and VxRail HCI System Software, delivers deep integration across the VMware ecosystem. This means you can rapidly deploy secure on-premises cloud infrastructure and take advantage of a full stack single-click lifecycle management experience."[6] These technologies further enhance integration with business processes and systems by allowing for workloads to be seamlessly transferred between public and private cloud infrastructures. For more on this topic, discuss it with a representative.


3. What is the average total historical downtime for the service(s) we're interested in?

Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. That said, Dell Technologies provides disaster recovery as a service for hybrid cloud platforms using its Dell Cloud Disaster Recovery and PowerProtect DD for helping laboratories limit the repercussions of their public or private cloud going down.


4. Do we receive comprehensive downtime support in the case of downtime?

Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. However, Dell still provides support services for its service offerings. Per its Dell Technologies APEX service offering description, the "Dell APEX Service includes ... support from Dell for the Dell APEX Service," as described within the document. Be sure to confirm the support terms for the service you select.


5. Where are your servers located, and how is data securely transferred to and from those servers?

Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. That said, it will be useful to understand the underlying technology supplied by Dell in regards to data transmission to public and private cloud instances. Cloud-based data protection services from Dell such as Kubernetes Data Protection, PowerProtect Cyber Recovery, Cloud Disaster Recovery, and more may be of additional interest.


6. Who will have access to our data (including subcontractors), and what credentials, certifications, and compliance training do they have?

Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. That said, Dell Technologies does state its policies on secure development of products and applications, stating[7]:

  • "Dell provides security training to employees on job-specific security best practices and policies to create a security-aware culture across its entire employee community."
  • "Dell has established a comprehensive security program, which ... includes analysis activities such as threat modeling, static code analysis, and security testing to discover and address security defects throughout the development lifecycle."
  • "Dell has also designed a baseline set of security capabilities to meet customers’ security objectives and compliance requirements."


7. Will our sensitive and regulated data be stored on a machine dedicated to complying with the necessary regulations?

Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. However, as noted in the prior question, as well as Dell's compliance statement, the company attempts to embed strong data protection and compliance mechanisms into its offerings.


8. How segregated is our cloud data from another customer's, i.e., will lapses of security of another customer's cloud affect our cloud? (It typically won't, but asking the question will hopefully prompt the provider to better explain how your data is segregated.)

Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant.


9. Do you have documented data security policies?

Dell Technologies documents its thoughts and practices on security in several places:


10. How do you test your platform's security?

Many points about security and testing can be found in prior questions (e.g., 6 and 9). For further details, discuss this with a Dell Technologies representative.


11. What are your policies for security audits, intrusion detection, and intrusion reporting?

Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. That said, Dell's implementation of VMware Cloud Foundation in some of its cloud technologies allows for setting up firewall rules, antivirus scanning and intrusion detection in their hybrid cloud.[8]


12. What data logging information is kept and acted upon in relation to our data?

Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant.


13. How thorough are those logs and can we audit them on-demand?

Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. However, in its Dell Technologies APEX Services Terms of Service (presumably for its SaaS services), Dell does mention that it[9] :

monitors and collects telemetry data relating to Your use thereof. Dell may collect certain information related to the Service Offering through a telemetry collector (“Collector”). Such information may include, without limitation, diagnostics, configurations, usage data, performance, deployment location information, and system information sent to Dell automatically by Dell’s systems and tools (“System Data”).

However, it's not clear if customers can audit this data on-demand. Consult with a representative to learn more.


14. For HIPAA-eligible data (e-PHI) we may have, will you sign a business associate agreement?

Dell Technologies APEX is not a public cloud, and as such, this question is not fully relevant. That said, it's worth noting that the Dell Technologies APEX Services Terms of Service actually mentions HIPAA, stating "If Customer is subject to the U.S. Health Insurance Portability and Accountability Act (“HIPAA”) and Customer has not executed a Business Associate Agreement (“BAA”) with Dell for the APEX Service, Customer acknowledges that the Dell BAA ... applies to Dell and Customer for the APEX Service."[9] As such, if data and information governed by HIPAA gets stored on Dell Technologies APEX machines, it sounds like yes, a business associate agreement will be signed.


15. What happens to our data should the contract expire or be terminated?

The company states in its Dell Technologies APEX Services Terms of Service the following[9]:

If Customer has elected to terminate the Dell APEX Service at the end of Customer’s Subscription Term, Customer will have thirty (30) days from the time Dell notifies Customer and Customer’s Dell Channel Partner, as applicable, of its intent to pick up the Dell APEX System, or if no notice is provided, then thirty (30) days from the last day of the Subscription Term, as applicable, within which to delete Customer Content from the Dell APEX System. If the Subscription is terminated prior to the end of the term, Customer will have thirty (30) days from the time Dell notifies Customer and Customer’s Dell Channel Partner, as applicable, of termination, within which to delete Customer’s Content from the Dell APEX System.

For more clarity, discuss this with a Dell Technologies representative.


16. What happens to our data should you go out of business or suffer a catastrophic event?

Presumably, if Dell goes out of business, you may have to return equipment, but not without first being able to back up data from that equipment first. You'll have to clarify this with a representative. As for catastrophic events: "To the extent that Dell has any liability for loss of Customer Content, Dell will only be liable for the cost of commercially reasonable and customary efforts to recover the lost Customer Content from Your last available backup."[9] Read the Terms of Service and discuss with a representative to confirm.


17. Can we use your interface to extract our data when we want, and in what format will it be?

As a hybrid solution, you should be able to extract data at whim to another private of public cloud location.


18. Are your support services native or outsourced/offshored?

It is unclear if support personnel are local to the customer or if support is outsourced to another business and country. Discuss this with a Dell Technologies APEX representative.

Managed security services

Dell doesn't appear to explicitly advertise "managed security services." Dell does, however, offer a standard managed services portfolio through its Dell Technologies Managed Services offering.[10] One of the offerings in that managed services portfolio is "Dell Technologies Managed Detection and Response Pro Plus." Dell describes these services as a "fully-managed, 360° security operations solution [that] helps you prevent and respond to attacks and recover if a breach occurs."[11] This managed service is described as having four components: agent rollout assistance, thread detection and investigation, response and active remediation, and remote cybersecurity incident response.[11]


Additional information

Documentation and other media

External links

References

  1. "Dell Technologies Delivers Fourth Quarter and Full Year Fiscal 2023 Financial Results". Dell Technologies. 2 March 2023. https://www.dell.com/en-us/dt/corporate/newsroom/announcements/detailpage.press-releases~usa~2023~03~20230302-dell-technologies-delivers-fourth-quarter-and-full-year-fiscal-2023-financial-results.htm. Retrieved 01 August 2023. 
  2. "Dell APEX - Get a more unified multicloud experience with technology you trust". Dell Technologies. https://www.dell.com/en-us/dt/apex/resources/apex-cloud-experience-ebook.htm. Retrieved 02 August 2023. 
  3. "Dell Technologies APEX". Dell Technologies. https://www.dell.com/en-us/dt/apex/index.htm. Retrieved 02 August 2023. 
  4. "Dell Cloud Tier". Dell Technologies. https://www.dell.com/en-us/dt/data-protection/powerprotect-dd-series/cloud-tier.htm. Retrieved 02 August 2023. 
  5. Agarwal, S. (5 May 2021). "APEX Cloud Services for All Your Essential Workloads". Dell Blog. https://www.dell.com/en-us/blog/apex-cloud-services-for-all-your-essential-workloads/. Retrieved 01 August 2023. 
  6. 6.0 6.1 "Dell APEX Private Cloud" (PDF). Dell Technologies. 2023. https://www.delltechnologies.com/asset/en-us/solutions/apex/technical-support/h19142-apex-private-cloud-spec-sheet.pdf. Retrieved 02 August 2023. 
  7. "Secure Development at Dell". Dell Technologies. https://www.dell.com/en-us/shop/secure-development/cp/secure-development. Retrieved 02 August 2023. 
  8. "VMware Cloud Foundation on Dell VxRail" (PDF). Dell Technologies. April 2023. https://www.delltechnologies.com/asset/en-us/products/converged-infrastructure/industry-market/h17854-vmware-cloud-foundation-on-dell-emc-vxrail-wp.pdf. Retrieved 02 August 2023. 
  9. 9.0 9.1 9.2 9.3 "Cloud Service Offerings Agreement". Dell Technologies. 1 June 2020. https://i.dell.com/sites/csdocuments/Legal_Docs/en/us/cloud-service-offerings-agreement.pdf. Retrieved 02 August 2023. 
  10. "Dell Managed Services". Dell Technologies. https://www.dell.com/en-us/dt/services/managed-services/index.htm. Retrieved 02 August 2023. 
  11. 11.0 11.1 "Managed Detection and Response Pro Plus" (PDF). Dell Technologies. https://www.dell.com/en-us/dt/services/security-services/managed-detection-response-pro-plus.htm. Retrieved 02 August 2023.