VMWare Security Hardening

[dlmit]

I am evaluating the security of our companies VMware Infrastructure and have downloaded the Security Hardening for VMware Infrastructure 3 (VMware ESX3.5 and VMware Virtual Center2.5). We recently have upgraded the majority of the VMware servers to VSphere 4.0. Do they have a Security Hardening Guide for VSphere or is it similar enough that I can use the Security Hardening for VMware Infrastructure 3.

[vmroyale · Accepted solution]

Hello and welcome to the forums.

As far as I know, there is not yet an updated version of this document. I've been looking for it also. Most (if not almost all) of the information in the vi3 guide is still relevant to vSphere. Obviously, some of the new features like dvSwitches won't be covered, but for the basics it is still a solid guide.

Good Luck!

[dlmit]

Thanks So Much

[vmroyale]

There is now a draft out of the new version - check this discussion for more information.

[spivmonkey]

Hi

As I think someone else has already answered there are only draft versions available at the moment. However the v.3.x hardening guide from CIS (which I was a contributor to) plus VMware's current hardening white paper will stand you in good stead. If you are looking for a free tool that will take the effort out of assessing your environment for you then you may want to check out this tool: http://www.vminformer.com/, I am one of the developers for it so if you have questions give me a shout.

Cheers

Spiv