VMware Cross-Cloud Architecture

Securing ESXi hosts

To protect the ESXi hosts against unauthorized intrusion and misuse, consider the following options for improving infrastructure security:

• Limit user access:
  • To improve security, restrict user access to the management interface and enforce access security policies, such as setting up password restrictions.
  • The ESXi shell has privileged access to certain parts of the host, therefore provide only trusted users with ESXi shell login access.
  • Confirm that SSH access is disabled. This prevents remote access to the console of ESXi hosts.
• Use only VMware sources to upgrade or patch ESXi hosts. VMware does not support upgrading these packages from any source other than a VMware source. If a download or patch is used from another ...