Whitepaper: VMware ESX Security Technical Implementation Guide

The need for security the virtualization hosts is growing.
In the last year several key entities released a series of guides and tools to help the customers in hardening the virtual infrastructures. Here some examples:

• In February 2007 VMware released a 19-pages security guide for VI 3.x
• In October 2007 the Center for Information Security (CIS) released a 70-pages security guide for ESX 3.x hosts
• In June 2008 Tripwire released a free configuration manager tool for ESX hosts, developed in collaboration with VMware

Since April 2008 the US Department of Defense can be added to this list, with a new 100-pages security guide which covers almost every aspect of VI 3.5 implementation.