5. Securing the Network | Hyper-V Security

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Hyper-V Security

By : Eric Siron, Andy Syrewicze

4.5 (2)

Hyper-V Security

4.5 (2)

By: Eric Siron, Andy Syrewicze

Overview of this book

Hyper-V Security is intended for administrators with a solid working knowledge of Hyper-V Server, Windows Server, and Active Directory. An administrator with a functional environment will be able to use the knowledge and examples present in this book to enhance security.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Introducing Hyper-V Security

1. Introducing Hyper-V Security

The importance of Hyper-V security

Basic security concerns

A starting point to security

Hyper-V terminology

Acquiring Hyper-V

Summary

2. Securing the Host

2. Securing the Host

Understanding Hyper-V's architecture

Choosing a management operating system

Disabling unnecessary components

Using the Windows Firewall

Relying on domain security

Leveraging Group Policy

Using security software

Configuring Windows Update

Employing remote management tools

Following general best practices

Summary

3. Securing Virtual Machines from the Hypervisor

3. Securing Virtual Machines from the Hypervisor

Using the Hyper-V Administrators group

Leveraging PowerShell Remoting

Using custom PowerShell Remoting endpoints

Summary

4. Securing Virtual Machines

4. Securing Virtual Machines

Understanding the security environment of VMs

Leveraging Generation 2 virtual machines

Employing anti-malware on a virtual machine

Using Group Policy with virtual machines

Limiting exposure with resource limitations

Applying general best practices

Summary

5. Securing the Network

5. Securing the Network

Understanding SSL encryption

Leveraging network hardware

Using the virtual switch's isolating technologies

Employing Hyper-V virtual switch ACLs

Configuring the Windows Firewall

Using management tools remotely

Using Hyper-V with IPsec

Configuring virtual network adapter protections

Encrypting cluster communications

Securing Hyper-V Replica traffic

Summary

6. Securing Hyper-V Storage

6. Securing Hyper-V Storage

Configuring NTFS security for VM storage

Securing SMB 3.0 shares for VM storage

Securing iSCSI connections

Using Secure Boot

Using BitLocker

Understanding the role of backup

Summary

7. Hyper-V Security and System Center VMM

7. Hyper-V Security and System Center VMM

Enhancing Hyper-V host security through VMM

Securing the VMM installation

Network virtualization and multi-tenancy

Providing secure self-service with the Windows Azure Pack

Summary

8. Secure Hybrid Cloud Management through App Controller

8. Secure Hybrid Cloud Management through App Controller

System requirements

Installing App Controller

App Controller's role-based security model

Summary

Index

Index

Employing Hyper-V virtual switch ACLs

The Hyper-V virtual switch doesn't include a full-fledged firewall, but it does have one of the firewall's most important yet basic features. Access control lists (ACLs) are simple definitions of traffic rules that allow or deny particular communication types. The basic port ACL was introduced to Hyper-V in the 2012 version, and the extended ACL was part of the 2012 R2 release.

A firewall defines its rules from the perspective of the firewall itself. It controls traffic as it passes through. In contrast, a Hyper-V port ACL is defined directly on virtual adapters and works from their perspective. It's important to remember this as you create ACLs.

The key to the ACL is that it is a list. The most meaningful way to use ACLs is by layering them. This is most commonly done by creating a universal rule that blocks all traffic and then creates exceptions.

Using basic port ACLs

The basic ACL type allows you to control connections between virtual adapters and remote...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Hyper-V Security

Search

Your notes and bookmarks