Question about ESX Hardening Guide : any feedback ?

[christophe.niel]

Hi

I'm looking to deploy some new environments that will be backed up with Veeam b&r on ESX6.5 (or 6.7 if the project allows it), but this environments will need to follow the hardening guide for vsphere ESX 6.0 (and the security configuration guide) from this page https://www.vmware.com/security/hardening-guides.html

when you filter these guides on "Is desired value the default?" = No and "Negative Functional Impact" not "none", you get some results that may or may not have impact on Veeam functions


so my question is this : has anyone ever implemented any or all the recommendations from these security guides in production and had issues with backup, restore or replication because of them?

I'll do some lab testing as soon as I have one available, but any information is appreciated

Thanks in advance
Christophe

[Regnor]

I have only done the hardening guide for non-Veeam customers but don't experience any problems with their backup solutions. The only problem could be disabling TLS1.0 although I'm not sure if this still affects Veeam: https://www.veeam.com/kb2181