6. Securing Hyper-V Storage | Hyper-V Security

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

Hyper-V Security

By : Eric Siron, Andy Syrewicze

4.5 (2)

Hyper-V Security

4.5 (2)

By: Eric Siron, Andy Syrewicze

Overview of this book

Hyper-V Security is intended for administrators with a solid working knowledge of Hyper-V Server, Windows Server, and Active Directory. An administrator with a functional environment will be able to use the knowledge and examples present in this book to enhance security.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Introducing Hyper-V Security

1. Introducing Hyper-V Security

The importance of Hyper-V security

Basic security concerns

A starting point to security

Hyper-V terminology

Acquiring Hyper-V

Summary

2. Securing the Host

2. Securing the Host

Understanding Hyper-V's architecture

Choosing a management operating system

Disabling unnecessary components

Using the Windows Firewall

Relying on domain security

Leveraging Group Policy

Using security software

Configuring Windows Update

Employing remote management tools

Following general best practices

Summary

3. Securing Virtual Machines from the Hypervisor

3. Securing Virtual Machines from the Hypervisor

Using the Hyper-V Administrators group

Leveraging PowerShell Remoting

Using custom PowerShell Remoting endpoints

Summary

4. Securing Virtual Machines

4. Securing Virtual Machines

Understanding the security environment of VMs

Leveraging Generation 2 virtual machines

Employing anti-malware on a virtual machine

Using Group Policy with virtual machines

Limiting exposure with resource limitations

Applying general best practices

Summary

5. Securing the Network

5. Securing the Network

Understanding SSL encryption

Leveraging network hardware

Using the virtual switch's isolating technologies

Employing Hyper-V virtual switch ACLs

Configuring the Windows Firewall

Using management tools remotely

Using Hyper-V with IPsec

Configuring virtual network adapter protections

Encrypting cluster communications

Securing Hyper-V Replica traffic

Summary

6. Securing Hyper-V Storage

6. Securing Hyper-V Storage

Configuring NTFS security for VM storage

Securing SMB 3.0 shares for VM storage

Securing iSCSI connections

Using Secure Boot

Using BitLocker

Understanding the role of backup

Summary

7. Hyper-V Security and System Center VMM

7. Hyper-V Security and System Center VMM

Enhancing Hyper-V host security through VMM

Securing the VMM installation

Network virtualization and multi-tenancy

Providing secure self-service with the Windows Azure Pack

Summary

8. Secure Hybrid Cloud Management through App Controller

8. Secure Hybrid Cloud Management through App Controller

System requirements

Installing App Controller

App Controller's role-based security model

Summary

Index

Index

Customer Reviews

4.5 (2)

5 star

50%

4 star

50%

3 star

0%

2 star

0%

1 star

0%

Securing iSCSI connections

Naturally, iSCSI travels across the network. In their natural form, the packets are easy to decode. If they're intercepted, an attacker will have no problem in extracting their contents. Unless steps are taken, an attacker can also pretend to be a host with legitimate access to the iSCSI target, and read its contents that way. There are a few ways to protect them.

Physical and logical isolation

The best way to protect iSCSI traffic is to put it on physical network hardware that has nothing in common with anything else. With that precaution taken, there's usually nothing else necessary to lock down iSCSI communications. This has an additional benefit of lowering the amount of network traffic that iSCSI traffic needs to contend with. Due to the way that switching works, this is usually insignificant unless there are many hops.

The following diagram shows one architectural option to isolate iSCSI:

Another option is to use logical isolation. You can employ a common switching...

Visually different images

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Hyper-V Security

Search

Your notes and bookmarks