VMware Workstation 7 Bedienungsanleitung PDF herunterladen (Seite 402)

Workstation User’s Manual

402 VMware, Inc.

Setting Network Access Policies

Thenetworkaccessfeatureusesapacket‐filteringfirewalltoenableyoutospecify

whichmachinesorsubnetsanACEinstanceoritshostsystemmayaccess.Thismeans

thatyoucan,forexample,configuretheinstancesothatitisallowedtoconnectonlyto

yourVPNserver,whichthencontrolsaccesstoot

herresources.

Youcanalsocustomizethenetworkaccesssettingstofilteronthebasisofnetwork

addresses,trafficdirection,protocol,andports.Youcansetthefollowingtypesof

networkaccessrestrictiondefinitions:

 Networkzones

 NetworkaccessforanACEinstance’shostmachine(alsoknownas“hostnetwork

access”)

 NetworkaccessforanACEinstance’sguestoperatingsystem(alsoknownas

“guestnetworkaccess”)

NetworkaccesspoliciescanbedynamiciftheACEinstanceisassociatedwithanACE

ManagementServer.ThismeansthatafteryoupublishapolicyupdatetoACE

ManagementServer,ACEinstancesgetthenewpolicythenextti

metheycheckfor

policyupdates.YoucanquicklylockACEinstancesoutofallorpartofyournetwork

tohelpcombatthespreadofawormorviruswithoutdeployingupdatepackages.See

theVMware ACEManagementServerAdministrator’sGuide.

Before You Begin Setting Host Policies

Usethefollowingguidelinesasyouplannetworkaccesspolicies:

 AhostmachineforACEinstancescanhaveonlyonehostpolicyfile.Ifyoutryto

installanACEpackagewithahostpolicyfileonamachinethatalreadyhasa

differenthostpolicyfile,installationofthenewpackagefails.

 AhostpolicyisineffectevenwhennoACEinstancesarerunning.Thepolicystarts 

immediatelyafterinstallationandstartsworkingeverytimethehostsystemboots.

 Anyrestrictionsonthehost’snetworkaccessalsorestrictnetworkaccessforan

ACEinstancethatusesNATnetworking,becausetheNATconnectionisaffected

byallthepoliciesyouapplytothehost.Ifyousetuprestrictedhostaccessbyusing

theACEruleseteditorandruleseditorratherthantheNetw

orkAccesswizard,

configuretheACE‐enabledvirtualmachine’svirtualNICstousebridged

networking.

 IfyouaresettingupamanagedACE‐enabledvirtualmachine,youmustallowthe

hosttoaccessACEManagementServer,communicatingthroughTCPoverthe

appropriateportthatyouconfigure.

1 2 ... 397 398 399 400 401 402 403 404 405 406 407 ... 511 512

Keine Kommentare

VMware Workstation 7 Bedienungsanleitung Seite 402