IT Best Practices and Compliance Reporting Information

VMware Security Tip of the Day - #9

In today's final VMware ESX security tip, I'll focus on one of the most important security considerations - documenting and monitoring configuration changes, especially security-related changes.

Find out why this is even more critical in a virtual environment than in a physical one.

Download Podcast_VMwareTip9.mp3

VMware ESX Security Tip of the Day - #8

Securing VMware ESX servers isn't enough when your securing a virtual environment. You need to make sure your Guest operating systems are secure as well. That's the focus of today's VMware Security Tip of the Day.

Download Podcast_VMwareTip8.mp3 (1946.2K)

VMware Security Tip of the Day - #7

Patching isn't just for physical operating systems and applications. In today's podcast, I'll talk about patching in a virtual environment.

VMware ESX, VMware security; information security; Alex Bakman, Virtual Center

Download Podcast_VMwareTip7.mp3 (1946.2K)

VMware Security Tip of the Day - #6

Today's tip focuses on the importance of Virtual Center for managing granular security access for your VMware environment.

You don't want to deploy VMware servers without it!

Download Podcast_VMwareTip6.mp3

VMware Security Tip of the Day - #5

This week, I'll share the final five VMware Security Tips. I hope you've had a chance to listen to the first four I've posted over the past few weeks.

In today's tip, I'll talk about disabling all unnecessary services in the VMware ESX console.

Download Podcast_VMwareTip5.mp3 (1997.2K)

VMware Security Tip of the Day - #4

Today, in my podcast,  I'm exploring why disabling root access in VMware ESX servers is essential to meeting compliance audit requirements.

Download Podcast_VMwareTip4.mp3 (2511.5K)

VMware Security Tip of the Day - #3

In today's VMware Security Tip of the Day, I'll explain the positive security benefits associated with maintaining VMware ESX's default security = high.

Download Podcast_VMwareTip3.mp3 (2462.1K)

VMware Security Tip of the Day - Podcast

In today's VMware Security Tip of the Day, I'll address the importance of controlling network traffic to and from critical servers and how VMware makes physical segregation possible.

Download Podcast_VMwareTip2.mp3 (2138.0K)

View the first Security Tip of the Day podcast.

VMware Security Tip of the Day - Podcast

In today's VMware Security Tip of the Day, I'll address the architecture in the X86 environment, the primary vulnerability in VMware ESX, and how to address it. 

Download Today's Tip of the Day (2436.4K)

Top 10 Recommendations for Improving VMware ESX Security

People can argue all day about the pros and cons of VMware ESX security, but I want to give you 10 specific recommendations you can implement today. At VMWORLD 2006, I offered these 10 recommendations to improve ESX security in your shop.

1. Use Firewall and Antivirus software for COS. Just as in any other operating system, this provides basic protection
2. Use VLANs to segment the physical network so only machines that are required to see each other are able to do so
3. When installing ESX, use security=high
4. Do not allow root level access over SSH and use secure commands
5. Disable all unnecessary services in console OS
6. Use VirtualCenter to help you manage granular security access
7. Stay current with ESX patches
8. Harden Guest Operating Systems
9. Control User Level Access using VirtualCenter
10. Document and monitor configuration changes in your environment, especially changes in security settings

You can download a PDF of my presentation materials here.

Hope these recommendations provide you with a more secure virtual environment.

Alex