Free tool secures VMware servers
Tripwire ConfigCheck ensures VMware ESX Servers are configured for optimal security, performance.
By
Denise Dubie
,
Network World
, 06/04/2008
- Share/Email
- Tweet This
- Print
Enterprise IT managers dealing with a proliferation of virtual servers might want to check out a free tool that promises to ensure virtual servers are configured for optimal security.
ConfigCheck is a free utility that downloads to a desktop and compares active virtual server configurations against best practices guidelines
development by VMware. The tool was jointly released Wednesday by VMware and configuration management software maker Tripwire.
"This is a free application that automates the process of checking systems for configuration errors that could cause security
and compliance issues in customer environments," says Mark Gaydos, vice president of marketing at Tripwire.
ConfigCheck downloads to a desktop and IT managers point it at ESX servers to compare actual configurations against the best practice guidelines laid out by VMware. Tripwire scaled back its Tripwire Enterprise product, which is designed to perform configuration and compliance audits of large environments. (Compare network configuration management tools.)
Because the two vendors jointly developed the free utility, ConfigCheck is equipped with VMware-specific configuration information
to enable IT managers to more quickly -- and with less manual effort -- determine if ESX servers in their environment are
configured properly for security, compliance and performance.
"This isn't just about security," says Dan Schoenbaum, senior vice president of marketing and business development at Tripwire.
"Virtual machines can be brought online or offline in matter of seconds and many customers are challenged with configuring
and managing these environments. Tracking configurations will deliver a greater integrity in the virtual environment and help
customers harden their virtual servers."
The ConfigCheck tool is based on VMware's own security hardening guidelines for ESX Server and future releases will also support
VMware's Infrastructure 3 products. The free tool notifies IT managers of potential conflicts in configurations and also offers
fixes to the incompatibilities between actual and desired configurations. The tool links back to the vendors' virtual security
resource center
"ConfigCheck will show where there is a failure to comply and if IT managers click on the notification they can also see remediation
advice," Gaydos adds.
ConfigCheck is available free for download from Tripwire here and more information on securing VMware virtual servers is available here.
Partner Content
Blue Stripe Software
www.bluestripe.com/
Improving Application Performance Troubleshooting
Diagnosing why an application is slow is hard, at times taking days or weeks to isolate and resolve. This paper explains the challenges involved using current management tools, provides a 'wish list' for application management and analysis, and explains the need for an application system-wide approach that monitors entire applications, not components.
Download Whitepaper
Virtual Vigilance: Managing Application Performance in Virtual Environments
This paper highlights the impact of virtualization on application performance. "Managing Application Performance in Virtual Environments" states: "Best-in-Class organizations are predominately taking actions around improving visibility across both physical and virtual systems, assessing the business impact of application performance and understanding interdependencies of applications in virtualized environments."
Download Whitepaper
Application Service Requests: The Missing Link for Pragmatic ITSM
Forrester Research analyst Glenn O'Donnell and BlueStripe co-founder Vic Nyman discuss a breakthrough approach to application problem management. Learn the new approach for ITSM problem management, which provides: Rapid isolation of application slow-downs to specific components for quick problem resolution, 24/7 monitoring for proactive notification of potential issues before end users are impacted and much more.
Register for Webcast
Comments (1)
I like it!By Anonymous on June 10, 2008, 1:05 amI downloaded the ConfigCheck utility from Tripwire and found tons of value. I have seen the hardening guidelines from VMware, but they are too long and complicated...
Reply | Read entire comment
View all comments