I am being tasked to find out how we can better manage all of the VMs that our developers have on their desktops. Our security team wants to be able to have visibility into each of the VMs on the developer systems to include ensuring AV tools, compliance, and that patches are being applied. Has anyone else run into this? The first thing I can think of is disabling the NAT capability to make sure each VM gets an IP address on the network so that they can be seen. After that the only way to make sure that the tools are installed is a written policy unless I force the developers to use a centrally managed template for each OS, but that creates overhead of keeping the templates updated.
Thoughts?
Thanks!
