Mastering VMware vSphere 6.5

Host hardening

To protect the ESXi hosts against unauthorized intrusion and misuse, consider the following options for improving infrastructure security:

• Limit user access: This is done by restricting user access to the management interface and enforcing access security policies such as setting up password restrictions. Lockdown Mode could be used to limit access to the hosts to all users, otherwise a centralized authentication could be useful to manage security groups and related roles (for example, with AD).
• Limit shell access: ESXi Shell (locally, but also through ESXi SSH access) has several privileged accesses to certain parts of the host. Therefore, provide only trusted users with ESXi Shell login access. Usually, it is safe to keep ...