Vsphre security

[sekharkollapudi]

Hi VCP's plz provide the security diffrences between esx3 and vsphere

[azn2kew]

To get the precise security vulnerabilities you may test out STIG for ESX 3.5 and wait until release of STIG for vSphere 4.0. The rest you can google or use VMware site for more details.

If you found this information useful, please consider awarding points for "Correct" or "Helpful". Thanks!!!

Regards,

Stefan Nguyen

VMware vExpert 2009

iGeek Systems Inc.

VMware, Citrix, Microsoft Consultant

[Texiwill · Accepted solution]

Hello,

The major differences:

VMsafe now available

vShield Zones now available

ESX Service Console went from 2.4 Kernel to 2.6 Kernel (with different linux settings), etc.

PVLAN support with Distributed Switch

Outside of that, they have added some more per VM options.

There are some new items, but the rules you know for VMware VI3 still apply. Nothing has really changed that much within the virtual environment. Just need to account for the newer features.

Best regards,

Edward L. Haletky VMware Communities User Moderator, VMware vExpert 2009, Virtualization Practice Analyst[/url]
Now Available: 'VMware vSphere(TM) and Virtual Infrastructure Security: Securing the Virtual Environment'[/url]
Also available 'VMWare ESX Server in the Enterprise'[/url]
[url=http://www.astroarch.com/wiki/index.php/Blog_Roll]SearchVMware Pro[/url]|Blue Gears[/url]|Top Virtualization Security Links[/url]|Virtualization Security Round Table Podcast[/url]

[thickclouds]

Hey Stefan -

When do you think STIG for vSphere is coming out?

[Texiwill]

Hello,

The STIG has no 'due' date as far as I know. At the moment it is being 'worked' as is the CIS benchmark and the VMware specific guidance.

Best regards,
Edward L. Haletky VMware Communities User Moderator, VMware vExpert 2009

Virtualization Practice Analyst[/url]
Now Available: 'VMware vSphere(TM) and Virtual Infrastructure Security'[/url]
Also available 'VMWare ESX Server in the Enterprise'[/url]
[url=http://www.astroarch.com/wiki/index.php/Blog_Roll]SearchVMware Pro[/url]|Blue Gears[/url]|Top Virtualization Security Links[/url]|
[url=http://www.astroarch.com/wiki/index.php/Virtualization_Security_Round_Table_Podcast]Virtualization Security Round Table Podcast[/url]