Changes in cloud-connected computing infrastructure are presenting hackers with new inroads to attack organizations. Staying informed about new vulnerabilities is challenging, as is implementing strong, cost-effective defenses. How does an information technology organization choose among new security postures and vendor products and services?

“It”s going to sound weird coming from a security guy, but I think it’s important to take the risk,” said Keith Busby (pictured), executive director of IT security at The School District of Philadelphia.

Busby spoke with John Furrier (@furrier) and Lisa Martin (@LuccaZara), co-hosts of theCUBE, SiliconANGLE Media’s mobile livestreaming studio, during the VMworld conference in Las Vegas, Nevada. They discussed the changing security landscape and the challenge of operating an IT department on a tight budget. (* Disclosure below.)

Virtualization + automation trim fat for the short-staffed

Most organizations won’t actually go live with a testing product or piece of equipment, but Busby did just this with not one, but five security products. His organization did proof-of-concept tests with all and pushed the school district’s entire network through them.

Wading knee-deep into unknown waters, it’s certainly possible to break things, but that’s OK, according to Busby. “Go ahead and break something. It’s alright. We’ll figure it out; we’ll fix it,” he said.

After all of the proof-of-concept tests, the school district decided on Fortinet Inc.’s FortiGate-VMX, which proved to be the best choice for the the school district’s security, automation and cost demands, Busby explained.

FortiGate-VMX is a security solution built for VMware virtual environments with integration for VMware’s Software-Defined Data Center. It leveraged VMware’s NSX virtualized networking technology for security that goes beyond the traditional IP-based firewalls. This new type of security is based on the application and its purpose, Busby pointed out.

Virtualization and automation are both crucial to securing the school’s network with limited funds. “The school district’s budget is $3.2 billion, and IT’s operating budget is $20.8 million,” he said. “We really have to be cost effective, and that’s where virtualization comes into play.”

The organization has only a few remaining physical servers; most are virtual. Automation lightens the workload for the department’s modest staff; tasks like proving the district is in compliance with the Children’s Internet Protection Act are now simpler, Busby added.

“The automation frees up our time so that we can focus on the policies, the education, the different procedures of the district. This way we’re not spending time hitting the keyboard trying to review our traffic logs,” he concluded.

Watch the complete video interview below, and be sure to check out more of SiliconANGLE’s and theCUBE’s coverage of the VMworld conference. (* Disclosure: Fortinet Inc. sponsored this segment, with additional broadcast sponsorship from VMware Inc. Fortinet, VMware, and other sponsors do not have editorial control over content on theCUBE or SiliconANGLE.)

Photo: SiliconANGLE