VMWare Anti-virus?

[Freakuk]

One for the techies.

I've got a project which involves rolling out AV, however there's a roadblock with VMWare and I am being told that you cannot deploy an AV client to the VMWare stack, i.e. VCentre and ESXi. I can deploy AV to each of the VM's but this will only offer defence at the VM level.

Does anyone know if what I am asking can be achieved and if so how and what products can work at this level in the stack?

[jpringle819]

This is VMware's stance on AV for ESXi https://kb.vmware.com/s/article/1036544. Might be a little out of date with the recent rise in ransomware attacks against the Hypervisor. Most important thing is to lock the hosts down, turn off access to SSH and secure shell when not required. Maybe restrict access through ACLs on the network kit.

Also ensure that you are keeping on top of patching ESXi and vCenter. This is a good post on protecting from ransomware https://www.truesec.com/hub/blog/secure-your-vmwar...

Finally it could be worth looking at VMware NSX https://www.vmware.com/uk/products/nsx.html#featur...

[geeks]

• VMware