Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying VMware vSphere Security Cookbook
  • Table Of Contents Toc
VMware vSphere Security Cookbook

VMware vSphere Security Cookbook

By : Greer
4.5 (10)
Buy this Book
close
close
VMware vSphere Security Cookbook

VMware vSphere Security Cookbook

4.5 (10)
By: Greer
Buy this Book

Overview of this book

This book is intended for virtualization professionals who are experienced with the setup and configuration of VMware vSphere, but didn't get the opportunity to learn how to secure the environment properly.
Table of Contents (15 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Threat and Vulnerability Overview
Icon
1. Threat and Vulnerability Overview
Icon
Introduction
Icon
Risk overview
Icon
Hypervisor threats
Icon
Hypervisor vulnerabilities
Icon
Guest virtual machine threats
Icon
Guest virtual machine vulnerabilities
Icon
Network threats
Icon
Network vulnerabilities
Icon
Storage threats
Icon
Storage vulnerabilities
Icon
Physical threats
Icon
Physical vulnerabilities
Icon
Security concepts
Icon
Summary
2
2. ESXi Host Security
Icon
2. ESXi Host Security
Icon
Introduction
Icon
Hardening the host via Console
Icon
Hardening the host via vSphere Client
Icon
Configuring host services
Icon
Configuring the host firewall
3
3. Configuring Virtual Machine Security
Icon
3. Configuring Virtual Machine Security
Icon
Introduction
Icon
Configuring administrative access options
Icon
Securing the guest OS
Icon
Guest virtual machine hardening
Icon
Configuring virtual machine resource isolation
Icon
Configuring the standard image templates
Icon
Managing snapshots
4
4. Configuring User Management
Icon
4. Configuring User Management
Icon
Introduction
Icon
Configuring vCenter Single Sign-On
Icon
Managing Single Sign-On users with vSphere Web Client
Icon
Configuring Active Directory integration
Icon
Managing Active Directory users and groups
Icon
Assigning permissions
Icon
Assigning administrative roles
5
5. Configuring Network Security
Icon
5. Configuring Network Security
Icon
Introduction
Icon
Configuring Standard vSwitch security
Icon
Configuring the port group security
Icon
Configuring VLANs
Icon
Creating DMZ networks
Icon
Providing Distributed vSwitch security options
Icon
Configuring PVLANs
6
6. Configuring Storage Security
Icon
6. Configuring Storage Security
Icon
Introduction
Icon
Configuring network isolation
Icon
Configuring iSCSI security
Icon
Configuring Header and Data Digest
7
7. Configuring vShield Manager
Icon
7. Configuring vShield Manager
Icon
Introduction
Icon
Installing vShield Manager OVA
Icon
Configuring vShield Manager settings
Icon
Adding vShield licensing to vCenter
Icon
Configuring SSL Security for Web Manager
Icon
Configuring Single Sign-On
Icon
Configuring user accounts and roles
Icon
Configuring services and service groups
8
8. Configuring vShield App
Icon
8. Configuring vShield App
Icon
Introduction
Icon
Installing vShield App
Icon
Configuring vShield App using the Web Console
Icon
Configuring vShield App Flow Monitoring
Icon
Configuring vShield App Firewall
Icon
Configuring vShield App SpoofGuard
9
9. Configuring vShield Edge
chevron up
Icon
9. Configuring vShield Edge
Icon
Introduction
Icon
Installing vShield Edge
Icon
Managing appliances
Icon
Managing interfaces
Icon
Managing certificates and revocation lists
Icon
Managing firewall rules
Icon
Managing NAT rules and static routes
Icon
Managing the IPSec VPN service
Icon
Managing SSL VPN-Plus
Icon
Configuring the load-balancing service
10
10. Configuring vShield Endpoint
Icon
10. Configuring vShield Endpoint
Icon
Introduction
Icon
Installing vShield Endpoint
Icon
Configuring vShield Endpoint using an antivirus
11
11. Configuring vShield Data Security
Icon
11. Configuring vShield Data Security
Icon
Introduction
Icon
Installing vShield Data Security
Icon
Configuring the vShield Data Security policies
Icon
Managing vShield Data Security reports
12
12. Configuring vSphere Certificates
Icon
12. Configuring vSphere Certificates
Icon
Introduction
Icon
Configuring a Windows CA template
Icon
Requesting certificates from a Windows CA
Icon
Using SSL Certificate Automation Tool 5.5
Icon
Process certificate requests
Icon
Registering the Single Sign-On certificate
Icon
Registering the Inventory Service certificate
Icon
Registering the vCenter certificate
Icon
Registering the Web Client certificate
Icon
Registering the Log Browser certificate
Icon
Registering the Update Manager certificate
Icon
Installing an ESXi host certificate
13
13. Configuring vShield VXLAN Virtual Wires
Icon
13. Configuring vShield VXLAN Virtual Wires
Icon
Introduction
Icon
Prerequisites for configuring VXLAN virtual wires
Icon
Configuring VXLAN virtual wires
Icon
Testing VXLAN virtual wires
Icon
Configuring firewall rules for VXLAN virtual wires
14
Index
Icon
Index

Installing vShield Edge

vShield Edge provides physical firewall and VPN capabilities at the virtualization level. In this recipe, we will configure a vShield edge appliance to pass traffic from our internal network to the DMZ network in a classic firewall scenario. When the edge appliance is configured, it will look like the following figure:

Getting ready

The installation of vShield Edge is accomplished through the vShield Web Console as introduced in Chapter 7, Configuring vShield Manager. A Core Infrastructure Suite (CIS) or vCloud Networking and Security (vCNS) license must be installed prior to installing vShield App and vShield Edge.

Multiple vShield Edge virtual appliances can be installed per data center within vCenter. Each vShield Edge can have as many as ten uplink ports, which allows for load balancing, NAT, and VPN services. vShield Manager must have been previously installed as a prerequisite.

In order to proceed, we require access to vShield App through the vSphere Client plugin...

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
VMware vSphere Security Cookbook
End of Section 9
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon