topic Re: Enhancing ESXi Host Security Against Ransomware with VMware NSX DFW in VMware NSX Discussions

Enhancing ESXi Host Security Against Ransomware with VMware NSX DFW

Punkgeek — Mon, 23 Oct 2023 14:08:34 GMT

Hello,

I have an ESXi host with a public IP address, and it is connected to the vCenter via the public IP address. Given that I am unable to move the ESXi into a private network, I'm considering using VMware NSX DFW to enhance its security against ransomware. Would this solution suffice?

Regards,

Re: Enhancing ESXi Host Security Against Ransomware with VMware NSX DFW

jeffersonc47 — Thu, 26 Oct 2023 18:18:59 GMT

The NSX DFW can't do firewalling of ESXi host vmk interfaces. However, there is a firewall native to ESXi that you can use - https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-8912DD42-C6EA-4299-9B10-5F3AEA52C605.html.

Re: Enhancing ESXi Host Security Against Ransomware with VMware NSX DFW

Punkgeek — Thu, 26 Oct 2023 18:21:33 GMT

Thank you for your response.

Is it safe enough to only limit IP addresses in the ESXi firewall?