After you integrate VMware vShield Manager with BIG-IQ™ Cloud, you can deploy your tenant application environment using the service insertion portion of the vShield interface. A tenant application on BIG-IQ Cloud corresponds to a service profile in the vShield Manager. The tenants see a catalog of application templates that they can deploy and delete as needed to deploy their own new vApps.
Using the vShield Manager interface, you can manage the virtual machines necessary for application deployments, add or remove a virtual machine, and start or stop virtual machines. You can use your cloud vendor's user interface to duplicate changes.
BIG-IQ™ Cloud must have network access to the resources on which VMware Shield Manager software is installed for communication purposes. Before you can manage cloud resources, you must define a network route between the BIG-IQ Cloud's internal VLAN and the management VLAN on the VMware vShield Manager. For specific instructions, refer to your VMware vShield Manager documentation.
The self-service resources that you provide for your tenants can be stored locally on F5 devices in your network. To provide access to a device's resources, you must make the BIG-IQ system aware of the device's existence.