Share what you know with millions of people

Focus is the best place to turn what you know into remarkable content
×
0

What's the best way to protect my virtualization management network?

What else can I do besides putting up a firewall?

Attachments

0
  • Recommended by:

Firewall is one probably the best way. You could also look into to some of the available intrusion prevention devices that also ensure the firewall is working as intended.

ISS is a service provider for network security and have a slew of options available for what you are inquiring about.

Here a link to their main page.

http://www.iss.net/

0
Anil Desai
Independent Consultant, Anil Desai, Inc.
Posted on Nov. 15, 2010
  • Recommended by:

At one level, you can treat your VMs like you do your physical servers. That is, you can rely on firewalls, IDS / IPS systems, and VLANs to prevent unauthorized access to servers and services.

However, there are some special considerations that are unique to VMs. First, VMs can be moved, copied, and powered off. When instances of VMs are introduced to the network, it's important that they either meet network patch requirements, or that there's an easy (automated) method of remediation them. Second, it's important for a network monitoring and management solution to be able to monitor traffic across virtual switches. In some configurations, VM traffic might not traverse an actual managed switch or firewall device, but this traffic can cause vulnerabilities.

Numerous vendors provide virtualization-aware network monitoring solutions allow you to keep track of some of the unique network security issues that are posed by VMs and virtual switches.

Answer This Question