VMware vSphere Security

• Virtualization Security
o What is Virtualization?
o Overview of x86 Virtualization
o CPU Virtualization and Instruction Isolation
o Memory Virtualization and Isolation
o Device I/O Virtualization and Isolation
• ESXi Security
o Built-In Security Features
o ESXi Firewall
o ESXi Services
o Lockdown Mode
o Bash & Shell
o Packages Integrity
o UEFI Secure Boot for ESXi Hosts
o Securing ESXi Hosts with Trusted Platform Module
o Network Time Protocol (NTP)
o Managed Object Browser (MOB)
o Ensure Security Using Host Profile and CLI
• Communication Security
o Basic Concepts
o VMware Certificate Infrastructure
o VMware Certificate Authority (VMCA)
o VMware Endpoint Certificate Store (VECS)
o Machine SSL Certificate
o Solution User Certificate
o Implementation Methods
o ESXi Certificate
• Authentication and Authorization
o AAA Model
o vCenter Single Sign-On (SSO)
o Smart Card Authentication
o Standalone ESXi Host
o Role, Permission, and Privileges
o ESXi Passwords
o ESXi Login Behavior
o Root vaulting!
o Login Message
• vCenter Security
o vpxuser Security
o Security Best Practices
o Password Policy
o Lockout Policy
o Network File Copy (NFC) Security
o ESXi Thumbprint Verification
o Required Network Ports
• Virtual Machine Security
o Guest OS Security
o UEFI Secure Boot
o VBS & vTPM
o VM Encryption
o VM Hardening
• Storage Security
o Datastore Storm Caution in shared Enviroments
o vSAN Encryption
o Disk Encryption!
o LUN Masking
o Zoning (Hard & Soft)
o iSCSI CHAP
o NFS Firewall Rule
• Network Security
o MAC Addresses
o Port Group Security
o Network Security Best Practices
o Securing Fault Tolerance Logging and vMotion Traffic
o NetFlow
o Port Mirroring
o IDS/IPS in vSphere Enviroments
o Management Jump Box or VPN
• Update & Patching
o vSphere Update Manager
o Guest OS Update Solutions
o Application Update Solutions
o Hardware Firmware Update
• Log Management
o ESXi Log Files
o VM Logging
o vCenter Log Files
o Syslog Configuration
o Configure Syslog on ESXi Hosts
o Log Management Tools
• Business Continuity
o High Availability
o Data Protection
o Disaster Recovery
• Other VMware Products and Security
o NSX Platform
o vSphere Platinum and AppDefense
o Horizon View