To secure the network where my ESXi vmkernel ports reside, I have them on a dedicated network and broadcast domain. Does VMware publish any guidelines specifying that this network also be firewalled off from other networks and allow only required IPs and traffic types to access it? There is nothing about this in the hardening guide. Any other VMware / Authoritative sources on this?
