vmware felhasználói közösség

Tegnap megjelent a VMware közösség aktív közreműködésével készült vSphere 4.0 Security Hardening Guide. A dokumentum tartalmazza mindazon tapasztalatokat és ajánlásokat, melyek a virtuális környezet biztonságos üzemeltetéséhez megszívelendők és követendők.

Kedvcsinálónak íme a válasz a “Mire (nem) való ez dokumentum?” kérdésre…

vSphere Hardening Guide Introduction
Scope
This set of documents provides guidance on how to securely deploy vSphere 4.0 in a production environment. The focus is on initial configuration of the virtualization infrastructure layer, which covers the following:

• The virtualization hosts (both ESX and ESXi)
• Configuration of the virtual machine container (NOT hardening of the guest OS or any applications running within)
• Configuration of the virtual networking infrastructure, including the management and storage networks as well as the virtual switch (but NOT security of the virtual machine’s network)
• vCenter Server, its database, and client components
• VMware Update Manager (included because the regular update and patching of the ESX/ESXi hosts and the virtual machine containers is essential to maintaining the security of the environment)

The following are specifically out of scope and are NOT covered:

• Security of the software running inside the virtual machine, such as operating system and applications, nor of the traffic traveling through the virtual machine networks
• Security of any other add-on products, such as SRM
• Detailed operational procedures related to maintaining security, such as event monitoring, auditing and privilege management. Guidance is provided on general areas in which to perform these important tasks, but details on exactly how to perform them are out of scope.

… és a dokumentum tartalomjegyzéke:

Bár kiadásra került, a dokumentum távolról sem végleges, a készítők várják az építő kritikákat mind a forma, mind pedig a tartalom tekintetében a hozzászólások közé!

Comments are closed.