topic Re: Get-VMHostFirewallException in VMware PowerCLI Discussions

Get-VMHostFirewallException

SCharchouf — Mon, 16 Nov 2020 16:43:48 GMT

I'm not sure if I'm on the correct way or no, so I'm asking for some guidance

I'm trying to get all enabled services in all ESXi / vCenter in order to check if the service is set to "AllIP" or to specific IP

#Connect to vCenter Server

Connect-VIServer = "vCenter1","vCenter2","vCenter3","vCenter4"

$VMHosts= Get-VMHost | Get-VMHostFirewallException | Where-Object {$_.Enabled -and ($_.ExtensionData.AllowedHosts.AllIP)}
$Results= @()

foreach ($VMHost in $VMHosts) {

}

Re: Get-VMHostFirewallException

LucD — Mon, 16 Nov 2020 16:53:07 GMT

I'm not sure what the actual question is and why you have an empty foreach loop in that snippet.

All the info is there

Connect-VIServer = "vCenter1","vCenter2","vCenter3","vCenter4" Get-VMHost | Get-VMHostFirewallException | Where-Object {$_.Enabled -and $_.ExtensionData.AllowedHosts.AllIP} | Select @{N='VMHost';E={$_.VMHost.Name}}, Name, Protocols, IncomingPorts, OutgoingPorts, ServiceRunning

Re: Get-VMHostFirewallException

SCharchouf — Mon, 16 Nov 2020 17:11:23 GMT

I thought we should do the same for all esxi in each vCenter.

Re: Get-VMHostFirewallException

LucD — Mon, 16 Nov 2020 17:13:38 GMT

The Get-VMHost should do that.
Unless your vCenters are not configured in LinkedMode, then you will have to run the same for each vCenter

Re: Get-VMHostFirewallException

SCharchouf — Mon, 16 Nov 2020 17:19:27 GMT

that's what I was going to say, plus I'm trying to get the output per vcenter.

I'm trying to do my best, so far I think my level has improved a lot

Re: Get-VMHostFirewallException

LucD — Mon, 16 Nov 2020 17:23:42 GMT

If you get all the ESXi nodes for all vCenters, you can include the vCenter.

Connect-VIServer = "vCenter1","vCenter2","vCenter3","vCenter4" Get-VMHost | Get-VMHostFirewallException | Where-Object {$_.Enabled -and $_.ExtensionData.AllowedHosts.AllIP} | Select @{N='vCenter';E={([uri]$_.VMHost.ExtensionData.Client.ServiceUrl).Host}}, @{N='VMHost';E={$_.VMHost.Name}}, Name, Protocols, IncomingPorts, OutgoingPorts, ServiceRunning

Re: Get-VMHostFirewallException

SCharchouf — Mon, 16 Nov 2020 17:37:47 GMT

it's possible to add the information related to IP?
I mean if it's set to All IP?
maybe it's me who is poorly expressed on the subject but here is the idea. in fact when you access "System", "Firewall" we find this information:
Service Name
TCP ports
UDP ports
Allowed IP addresses

Re: Get-VMHostFirewallException

LucD — Mon, 16 Nov 2020 17:45:14 GMT

If you filter on AllIP there are no individual allowed IP addresses in the result.