All VMware security guidelines in one place

Just for quick search :)

http://www.vmware.com/support/support-resources/hardening-guides.html

Update: vSphere 5.1 Hardening Guide Release Candidate has been announced

Hyper-V 2.0 vs Hyper-V 3.0

Features Comparison: Windows Server 2008 R2 Hyper-V and Windows Server 2012 Release Candidate Hyper-V (pdf)

Interesting Virtual News and Posts - #4

Next vSphere version?

• Beta on vSphere 5.1 currently is being tested. And new version probably will be announced at VMworld USA on August.
• Fault Tolerance support for virtual machines running multiple vCPUs
• Boot from Fiber Channel over Ethernet (FCoE)
• Support for virtualized Microsoft Domain Controllers. Windows Server 2012 running as a virtual Domain Controller is virtualization aware. This means a snaphot of the virtual machine can be made and restored if needed without getting issues in AD because of the USN. This is currently advertised as a feature of Windows Server 2010 Hyper-V. It leverages an ability that Microsoft has added to Hyper-V called Generation ID. This new feature allows a virtual domain controller to know whether or not it’s the latest version of AD. This same technology also enables administrators to clone virtual domain controllers, making the DC deployment process much easier. Microsoft is working with other hypervisor vendors implement Gen ID in their own products to bring this capability to all users of virtual domain controllers.

How to add a new Hyper-V host to SCVMM 2012

Trend Micro Deep Security 8.0 SP1 released
The most significant changes in SP1 are:

• On Demand scan agent based anti-malware on Linux. Supported versions are Red Hat Linux 5, 6 (64 bit only), Suse Linux 10, 11 (32 and 64bit)
• Protecting ESX 4.1/ESXi 4.1 hosts with Deep Security 8.Deep Security can now provide protection for virtual machines running on ESX/ESXi 4.1 and 5.0. You can use the same Deep Security Virtual Appliance in combination with the proper version of the Filter Driver.
• Improved anti-malware scan exclusions.Exclusions were only possible for files. Now directories, files and file extensions are supported for the anti-malware scan, either by listing them specifically or through the use of wildcards.
• More Localization. The manager is now also available in Japanese and Simplified Chinese. The agent and notifier are also localized in German, French, Spanish, Italian, Russian, Japanese, Korean, Simplified Chinese and Traditional Chinese.

GetBestInterface for Linux or How to get source IP by target IP

Lets assume that you need to know which source IP address will be used to send information to known target IP address.
In Windows you can use GetBestInterface function. But Linux doesn't have something the same (or I don't know about it :)
The possible solution is to create socket connection to the target IP and call getsockname function. It returns sockaddr struct that you can use to get source IP address for this connection.

I suppose that this approach works for Windows also but I preffer to use GetBestInterface for this OS.

Here you can find source code sample  :)