Existing policies should already cover virtual server security; it is exactly the same as physical server security.
You can install anti-malware software on each VM, close all unused ports, and perform other server hardening steps to reduce and control each VM’s attack surface. Base the amount of security for each VM on the risk to the organization if it is compromised.
Also, to mitigate costs and help control information assurance across a virtualized data center, do not mix data of different classifications on the same VM. Group VMs of the same classification on the same host.
WestelCS
11 Posts
0
December 19th, 2013 11:00
Existing policies should already cover virtual server security; it is exactly the same as physical server security.
You can install anti-malware software on each VM, close all unused ports, and perform other server hardening steps to reduce and control each VM’s attack surface. Base the amount of security for each VM on the risk to the organization if it is compromised.
Also, to mitigate costs and help control information assurance across a virtualized data center, do not mix data of different classifications on the same VM. Group VMs of the same classification on the same host.
MShadow
1 Rookie
•
42 Posts
0
April 15th, 2014 07:00
I would really like this question answered. I've been trying to figure this out for some time. Did you ever get an answer?
Simply put, how can I get a report of VMs that are not being backed up?