A virtual enclave is a defined group of virtual machines, virtual port groups, resources (if using resource pools), and potentially underlying datastores. The notion of a virtual enclave is to provide segmentation within the VDI, separating one group from another.
The following figure is an illustration showing three separate enclaves:
In the preceding figure, three classifications of vDesktops exist within the overall virtual infrastructure. These classifications are composed of desktop pools of the same name. They are as follows:
From within the virtual infrastructure, there are ways to isolate the three enclaves:
VLAN tagging
Separate vSwitch/vDSwitch uplinks
Enabling vSwitch/vDSwitch security...