Book Image

VMware vSphere Security Cookbook

By : Michael Greer
Book Image

VMware vSphere Security Cookbook

By: Michael Greer

Overview of this book

Related Content you might be interested in

Current Title:

Small book image
VMware vSphere Security Cookbook
Michael Greer
Nov, 2014 | 334 pages
No titles found
Table of Contents (20 chapters)
VMware vSphere Security Cookbook
VMware vSphere Security Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Threat and Vulnerability Overview
Threat and Vulnerability Overview
Introduction
Risk overview
Hypervisor threats
Hypervisor vulnerabilities
Guest virtual machine threats
Guest virtual machine vulnerabilities
Network threats
Network vulnerabilities
Storage threats
Storage vulnerabilities
Physical threats
Physical vulnerabilities
Security concepts
Summary
2
ESXi Host Security
ESXi Host Security
Introduction
Hardening the host via Console
Hardening the host via vSphere Client
Configuring host services
Configuring the host firewall
3
Configuring Virtual Machine Security
Configuring Virtual Machine Security
Introduction
Configuring administrative access options
Securing the guest OS
Guest virtual machine hardening
Configuring virtual machine resource isolation
Configuring the standard image templates
Managing snapshots
4
Configuring User Management
Configuring User Management
Introduction
Configuring vCenter Single Sign-On
Managing Single Sign-On users with vSphere Web Client
Configuring Active Directory integration
Managing Active Directory users and groups
Assigning permissions
Assigning administrative roles
5
Configuring Network Security
Configuring Network Security
Introduction
Configuring Standard vSwitch security
Configuring the port group security
Configuring VLANs
Creating DMZ networks
Providing Distributed vSwitch security options

Configuring PVLANs
6
Configuring Storage Security
Configuring Storage Security
Introduction
Configuring network isolation
Configuring iSCSI security
Configuring Header and Data Digest
7
Configuring vShield Manager
Configuring vShield Manager
Introduction
Installing vShield Manager OVA
Configuring vShield Manager settings
Adding vShield licensing to vCenter
Configuring SSL Security for Web Manager
Configuring Single Sign-On
Configuring user accounts and roles
Configuring services and service groups
8
Configuring vShield App
Configuring vShield App
Introduction
Installing vShield App
Configuring vShield App using the Web Console
Configuring vShield App Flow Monitoring
Configuring vShield App Firewall
Configuring vShield App SpoofGuard
9
Configuring vShield Edge
Configuring vShield Edge
Introduction
Installing vShield Edge
Managing appliances
Managing interfaces
Managing certificates and revocation lists
Managing firewall rules
Managing NAT rules and static routes
Managing the IPSec VPN service
Managing SSL VPN-Plus
Configuring the load-balancing service
10
Configuring vShield Endpoint
Configuring vShield Endpoint
Introduction
Installing vShield Endpoint
Configuring vShield Endpoint using an antivirus
11
Configuring vShield Data Security
Configuring vShield Data Security
Introduction
Installing vShield Data Security
Configuring the vShield Data Security policies
Managing vShield Data Security reports
12
Configuring vSphere Certificates
Configuring vSphere Certificates
Introduction
Configuring a Windows CA template
Requesting certificates from a Windows CA
Using SSL Certificate Automation Tool 5.5
Process certificate requests
Registering the Single Sign-On certificate
Registering the Inventory Service certificate
Registering the vCenter certificate
Registering the Web Client certificate
Registering the Log Browser certificate
Registering the Update Manager certificate
Installing an ESXi host certificate
13
Configuring vShield VXLAN Virtual Wires
Configuring vShield VXLAN Virtual Wires
Introduction
Prerequisites for configuring VXLAN virtual wires
Configuring VXLAN virtual wires
Testing VXLAN virtual wires
Configuring firewall rules for VXLAN virtual wires
Index
Index

Configuring vShield App using the Web Console

There are several important configurations to set in the vShield App management Web Console. Configuring Fail Safe Mode sets the actions that will be taken if the vShield App fails or is down. Fail Safe Mode can either be set to allow or block. Excluding virtual machines such as vCenter is key to allow proper functionality since it will exclude any virtual machine from firewall rules.

Getting ready

In order to proceed, we require access to vShield Web Console. The client can be run on any modern Windows or Mac desktop operating system or server operating system.

Note

vShield Web Console requires Adobe Flash, which is not supported on Linux operating systems at this time.

Ensure the account used to log in has administrative rights to vShield Manager.

How to do it…

Viewing the current status is the first step in assessing the state of the vShield App. Once the app is confirmed to be in a healthy state, additional configurations can be accomplished by...

Previous Section
End of Section 4
Next Section