With regards to a classic on-prem vSphere infrastructure, if you hired a VMWare expert consultant who was tasked with building the vSphere infrastructure 'from scratch' so to speak, are there typically features and services that are enabled & installed by default that may not necessarily be required for each and every organisation who use vSphere technology?
And if this is indeed the case, as it is with most technologies, specific to vSphere you can provide some examples on default services/features that come with a new installation of vSphere and supporting management components, that best practice guides may suggest disabling/removing to help with security, performance, troubleshooting etc.
I am trying to understand from a risk management perspective, what should the organisation be doing to identify unnecessary services/features with a new vSphere project, and then subsequently disabling/uninstalling them?
For example, do VMware themselves give customers guidance in the form of best practice documentation, or are there any 'well known' unnecessary/dangerous services/features linked to vSphere infrastructure, that VMware consultants would know are likely unnecessary/dangerous, and would recommend to their customers to disable/uninstall during the build project? Or maybe there pre-hardened versions of the vSphere components that automatically strip out dangerous/usually unnecessary features? Any insight most welcome.
