Scenario 21

You are responsible for securing a vSphere environment. You plan to have SSH disabled on the ESXi hosts most of the time and to allow the appropriate administrators to enable SSH when needed. You want to ensure that SSH is automatically disabled after a specific amount of time. You want to ensure that after SSH is started on an ESXi host, it provides only a short amount of time for the user to connect and log in to the ESXi Shell using SSH. After the time expires, any users currently logged in to the shell remain connected but any attempts for new users to the shell fail to connect.

Click Here For Solution

Solution

To accomplish this task, the administrator can perform the following steps:

Use the vSphere Client to select the ESXi host and navigate to Configuration > Software > Security Profile.
Select the Services > Properties.
Select SSH.
If SSH is currently running, stop it by doing the following:

Click the Options button to open the Options window.
Click Stop.
Click OK.

Select the Services > Properties.
Select ESXi Shell.
If ESXi Shell is currently running, stop it by doing the following:

Click the Options button to open the Options window.
Click Stop.
Click OK.

Set the ESXi Shell Timeout using these steps:

Select the ESXi host and select Configuration > Software > Advanced Settings.
Select UserVars > UserVars.ESXiShellTimeOut. Set the value to 120 seconds.
Click OK.

Scenario 21

Scenario:

Requirements:

Environment Information:

Objective: 7.1 Secure ESXi Hosts

Guide Reference(s):

Click Here For Solution

Solution