This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[Virtual Appliance] Risk to install ASG on ESX for firewall

Hello,

At home, I have installed ASG virtual appliance on my ESX and the ASG make the connection to internet.

I ask me one question : The ESX is directly connected to the internet, so it can be hacked by a hacker ? Is the hardware ASG (or Software) is the best practice to protect correctly a network ? What is the best practice ? (it is not for my home, but this question is first for my customer.. I would like not make a security fail..)

Thank in advance

Best regards (and sorry for my english...)

This thread was automatically locked due to age.

Parents

0 William Warren over 13 years ago

That's the key..shared nics. the scenario you talk about is possible even if the systems weren't on the same host. It is possible to make them secure and the articles reference older esxi versions. Sure best practices say you need to run everything on different hardware sometimes you simply don't have the hardware and.or the money for that. As long as you setup the host correctly and the associated guests there's no more danger running them all on one as if they were on physically separate hardware or hosts machines.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 William Warren over 13 years ago

That's the key..shared nics. the scenario you talk about is possible even if the systems weren't on the same host. It is possible to make them secure and the articles reference older esxi versions. Sure best practices say you need to run everything on different hardware sometimes you simply don't have the hardware and.or the money for that. As long as you setup the host correctly and the associated guests there's no more danger running them all on one as if they were on physically separate hardware or hosts machines.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data