Should VMA and VDR be updated?

[ujjain]

I see both VMA and VDR run on RHEL5.2, does that mean we should update and secure them the same way as RHEL-VM's? Update packages via yum, ip-restrict ports, etc.

[golddiggie]

I would leave them both alone, unless VMware releases updates for them... They are pretty customized versions of RHEL, so if you do update via yum, you could break things...

VMware VCP4

Consider awarding points for "helpful" and/or "correct" answers.

[DSTAVERT · Accepted solution]

The vMA appliance can be updated using vima-update

The vDR appliance is replaced rather than updated.

Forum Upgrade Notice - the VMware Communities forums will be upgraded the weekend of December 12th. The forum will be in read-only mode from Friday, December 10th 6 PM PST until Sunday, December 12th 2 AM PST.

[ChrisDearden]

if only updates for vMA were released in a timly fashion. I know of security teams who are starting to get a little twitchy about missing recommended updates that I can't deploy manually.

@chrisdearden