Complete Hands-On Help for Securing VMware vSphere and Virtual Infrastructure by Edward Haletky, Author of the Best Selling Book on VMware, VMware ESX Server in the Enterprise As VMware has become increasingly ubiquitous in the enterprise, IT professionals have become increasingly concerned about securing it. Now, for the first time, leading VMware expert Edward Haletky brings together comprehensive guidance for identifying and mitigating virtualization-related security threats on all VMware platforms, including the new cloud computing platform, vSphere. This book reflects the same hands-on approach that made Haletky’s VMware ESX Server in the Enterprise so popular with working professionals. Haletky doesn’t just reveal where you might be vulnerable; he tells you exactly what to do and how to reconfigure your infrastructure to address the problem. VMware vSphere and Virtual Infrastructure Security begins by reviewing basic server vulnerabilities and explaining how security differs on VMware virtual servers and related products. Next, Haletky drills deep into the key components of a VMware installation, identifying both real and theoretical exploits, and introducing effective countermeasures. Coverage includes • Viewing virtualization from the attacker’s perspective, and understanding the new security problems it can introduce • Discovering which security threats the vmkernel does (and doesn’t) address • Learning how VMsafe enables third-party security tools to access the vmkernel API • Understanding the security implications of VMI, paravirtualization, and VMware Tools • Securing virtualized storage: authentication, disk encryption, virtual storage networks, isolation, and more • Protecting clustered virtual environments that use VMware High Availability, Dynamic Resource Scheduling, Fault Tolerance, vMotion, and Storage vMotion • Securing the deployment and management of virtual machines across the network • Mitigating risks associated with backup, performance management, and other day-to-day operations • Using multiple security zones and other advanced virtual network techniques • Securing Virtual Desktop Infrastructure (VDI) • Auditing virtual infrastructure, and conducting forensic investigations after a possible breach informit.com/ph | www.Astroarch.com

Securing virtual environments for VMware, Citrix, and Microsoft hypervisors Virtualization changes the playing field when it comes to security. There are new attack vectors, new operational patterns and complexity, and changes in IT architecture and deployment life cycles. What's more, the technologies, best practices, and strategies used for securing physical environments do not provide sufficient protection for virtual environments. This book includes step-by-step configurations for the security controls that come with the three leading hypervisor--VMware vSphere and ESXi, Microsoft Hyper-V on Windows Server 2008, and Citrix XenServer. Includes strategy for securely implementing network policies and integrating virtual networks into the existing physical infrastructure Discusses vSphere and Hyper-V native virtual switches as well as the Cisco Nexus 1000v and Open vSwitch switches Offers effective practices for securing virtual machines without creating additional operational overhead for administrators Contains methods for integrating virtualization into existing workflows and creating new policies and processes for change and configuration management so that virtualization can help make these critical operations processes more effective This must-have resource offers tips and tricks for improving disaster recovery and business continuity, security-specific scripts, and examples of how Virtual Desktop Infrastructure benefits security.

Edward L. Haletky’s Complete, Solutions-Focused Guide to Running ESX Server 3.5, vSphere, and VMware 4.x Extensively updated and revised, this is the definitive real-world guide to planning, deploying, and managing VMware ESX Server 3.5, VMware vSphere Hypervisor (ESXi), or VMware vSphere 4.x cloud computing in mission-critical environments. Drawing on his extensive experience consulting on enterprise VMware implementations, renowned expert Edward L. Haletky offers a “soup-to-nuts” collection of field-tested best practices and solutions. He illuminates the real benefits, issues, tradeoffs, and pitfalls associated with VMware’s newest platforms, using real-world examples that draw upon both VMware and third-party products. This edition features detailed coverage of new vSphere features such as Storage IO Control, Network IO Control, Load-Based Teaming, Distributed Virtual Switches, ESXi, hardware and processors, and a significantly expanded discussion of auditing and monitoring. Haletky offers new or enhanced coverage of VM Hardware, virtual networking, VMsafe, and more. All new coverage is thoroughly integrated into Haletky’s insightful discussion of the entire lifecycle: planning, installation, templates, monitoring, tuning, clustering, security, disaster recovery, and more. Haletky consistently presents the most efficient procedures, whether they use graphical tools or the command line. You’ll learn how to: • Assess VMware datacenter and infrastructure hardware requirements • Understand technical, licensing, and management differences between ESX/ESXi 3.5 and 4.x • Plan installation for your environment and identify potential “gotchas” • Select, configure, utilize, and support storage cost-effectively • Manage key operational issues associated with virtual infrastructure • Adapt existing network and security infrastructure to virtualization • Configure ESX from host connections • Configure ESX Server from Virtual Centers or hosts • Create, modify, and manage VMs (with detailed Windows, Linux, and NetWare examples) • Troubleshoot VM issues with eDirectory, private labs, firewalls, and clusters • Utilize vSphere 4.1’s improved Dynamic Resource Load Balancing (DRLB) • Implement disaster recovery, business continuity, and backup • Plan for vApps and the future of virtualization VMware ESX and ESXi in the Enterprise has long been the definitive single-source guide to VMware planning, deployment, and management. For today’s VMware architects, administrators, and managers, this edition will be even more valuable.

Drive Even More Value from Virtualization: Write VMware® Applications that Automate Virtual Infrastructure Management Companies running VMware have already achieved enormous gains through virtualization. The next wave of benefits will come when they reduce the time and effort required to run and manage VMware platforms. The VMware Infrastructure Software Development Kit (VI SDK) includes application programming interfaces (APIs) that allow developers and administrators to do just that. Until now, there has been little documentation for the APIs. In VMware VI and vSphere SDK, software architect Steve Jin demystifies the entire VMware VI and new vSphere SDK and offers detailed, task-based coverage of using the APIs to manage VMware more efficiently and cost-effectively. Jin walks you through using the VI SDK and cloud-computing vSphere SDK to manage ESX servers, ESX clusters, and VirtualCenter servers in any environment–no matter how complex. Drawing on his extensive expertise working with VMware strategic partners and enterprise customers, he places the VI SDK in practical context, presenting realistic samples and proven best practices for building robust, effective solutions. Jin demonstrates how to manage every facet of a VMware environment, including inventory, host systems, virtual machines (VMs), snapshots, VMotion, clusters, resource pools, networking, storage, data stores, events, alarms, users, security, licenses, and scheduled tasks. Coverage includes Understanding how the VI SDK fits into your VMware VI and Cloud Ready vSphere Environment Discovering the VI and vSphere SDK from the bottom up Using the author’s new VI Java API to write shorter, faster, and more maintainable code Managing VI and vSphere inventory and configurations Moving running VMs and storages across different physical platforms without disruption Optimizing system resources, hardening system securities, backing up VMs and other resources Leveraging events, alarms, and scheduled tasks to automate the system management Developing powerful applications that integrate multiple API features and run on top of or alongside VMware platforms Using the VI SDK to monitor performance Scripting with the VI SDK: building solutions with VI Perl, PowerShell, and Jython Avoiding the pitfalls that trip up VMware VI developers Integrating with and extending VMware platforms using VI SDK This book is an indispensable resource for all VMware developers and administrators who want to get more done in less time; for hardware vendors who want to integrate their products with VMware; for ISV developers building new VMware applications; and for every professional and student seeking a deeper mastery of virtualization.

Offers a comprehensive look at VMware technology, how to implement it, and how to make the most of what it offers.

This is the eBook version of the printed book. If the print book includes a CD-ROM, this content is not included within the eBook version. Complete Hands-On Help for Securing VMware Infrastructure-by Ed Haletky, Aut.