Integrity Assurance

vGate offers reliable integrity control mechanisms for all layers of your virtual environment.

On virtual machine level

vGate controls critical portions of .nvram, .vmx and .vmdk files directly on the storage side. Also, all changes made to virtual machine properties using management tools are monitored. With vGate, for example, one cannot mount a removable storage media unless they explicitly have been granted rights.

If vGate determines a machine to be compromised, it blocks system booting and reports the attempt to do so. Since virtual machine snapshots can be used to secretly alter the machine’s integrity, vGate can be instructed to either monitor or prevent making snapshots.

On ESX server level

Configuration of ESX servers is controlled through policies that define white lists of hardware and software, allowed network connections, and so on.

On vSphere level

vGate can prevent attempts to:

• Move and/or run a protected virtual machine to/on wrong ESX hosts.
• Store protected machine files on an insecure LUN.