VMware ESXi built-in network IDS/IPS

[AMD_Gamer]

I was just thinking about how all the data from each VM comes in and out of the NICs on an ESXi host and through the vSwitches. Wouldn't it be interesting if VMware was to integrate some kind of IDS into ESXi?

What do you think about this idea?

 

[NetJunkie]

I think it's called vShield Endpoint with something like Trend Micro Deep Security.

Working with it in my lab this week....doing a lesson on it.

 

[lopoetve]

Yep.

There were some third party solutions for a bit that used an isolated vswitch as well, with some voodoo in the vmotion code to get it to play well (and an override). Bluesomething. I haven't seen it in ages though.

 

[NetJunkie]

Yep.

There were some third party solutions for a bit that used an isolated vswitch as well, with some voodoo in the vmotion code to get it to play well (and an override). Bluesomething. I haven't seen it in ages though.

Blue Lane and you guys bought them. That's what turned in to some of the vShield suite. And yes, the initial version was all sorts of funky. Current one is much simpler.

 

[lopoetve]

Blue Lane and you guys bought them. That's what turned in to some of the vShield suite. And yes, the initial version was all sorts of funky. Current one is much simpler.

LOL.

Shows how much I pay attention to the networking side of the house.