2. Securing the Host | Hyper-V Security

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Hyper-V Security

By : Eric Siron, Andy Syrewicze

4.5 (2)

Hyper-V Security

4.5 (2)

By: Eric Siron, Andy Syrewicze

Overview of this book

Hyper-V Security is intended for administrators with a solid working knowledge of Hyper-V Server, Windows Server, and Active Directory. An administrator with a functional environment will be able to use the knowledge and examples present in this book to enhance security.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Introducing Hyper-V Security

1. Introducing Hyper-V Security

The importance of Hyper-V security

Basic security concerns

A starting point to security

Hyper-V terminology

Acquiring Hyper-V

Summary

2. Securing the Host

2. Securing the Host

Understanding Hyper-V's architecture

Choosing a management operating system

Disabling unnecessary components

Using the Windows Firewall

Relying on domain security

Leveraging Group Policy

Using security software

Configuring Windows Update

Employing remote management tools

Following general best practices

Summary

3. Securing Virtual Machines from the Hypervisor

3. Securing Virtual Machines from the Hypervisor

Using the Hyper-V Administrators group

Leveraging PowerShell Remoting

Using custom PowerShell Remoting endpoints

Summary

4. Securing Virtual Machines

4. Securing Virtual Machines

Understanding the security environment of VMs

Leveraging Generation 2 virtual machines

Employing anti-malware on a virtual machine

Using Group Policy with virtual machines

Limiting exposure with resource limitations

Applying general best practices

Summary

5. Securing the Network

5. Securing the Network

Understanding SSL encryption

Leveraging network hardware

Using the virtual switch's isolating technologies

Employing Hyper-V virtual switch ACLs

Configuring the Windows Firewall

Using management tools remotely

Using Hyper-V with IPsec

Configuring virtual network adapter protections

Encrypting cluster communications

Securing Hyper-V Replica traffic

Summary

6. Securing Hyper-V Storage

6. Securing Hyper-V Storage

Configuring NTFS security for VM storage

Securing SMB 3.0 shares for VM storage

Securing iSCSI connections

Using Secure Boot

Using BitLocker

Understanding the role of backup

Summary

7. Hyper-V Security and System Center VMM

7. Hyper-V Security and System Center VMM

Enhancing Hyper-V host security through VMM

Securing the VMM installation

Network virtualization and multi-tenancy

Providing secure self-service with the Windows Azure Pack

Summary

8. Secure Hybrid Cloud Management through App Controller

8. Secure Hybrid Cloud Management through App Controller

System requirements

Installing App Controller

App Controller's role-based security model

Summary

Index

Index

Relying on domain security

Unfortunately, an all too common myth around Hyper-V security is that it is better to keep the Hyper-V host in workgroup mode. In reality, if an Active Directory domain is available, it is almost universally better to place all computer systems that are part of the local network into the domain, including the Hyper-V host. The lone exception is for systems that are so high-risk that it's almost expected that they'll be compromised. For these systems, the use of a perimeter network (also known as a DMZ) is a suitable solution. However, it is possible to use Hyper-V inside the local network while allowing all or some virtual machines to access only the perimeter. These options will be seen in Chapter 5, Securing the Network.

For systems that are within the local network, there are quite a few problems with using workgroup security when Active Directory services are available:

Username and password combinations must be transmitted for remote connections; while usually...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Hyper-V Security

Search

Your notes and bookmarks