VMWare security

[jwhpa]

Your help with VMWare info has been invaluable. I was able to get a cheap copy on eBay (Of course, if it doesn't have a serial number, it won't be so cheap. Time will tell.). So I was reviewing the documentation this morning and a thought struck me regarding security. If you have a Win98 virtual machine, do you need to secure it with its own anti-virus, anti-adware, anti-etc. programs, or will the host machine's security management cover the 98 V-machine? The programs I'll be using on the 98 machine won't need or have a web connection nor will I use it for email. I suppose, if they are compatible, I could load my anti-'s into 98, but this seems theoretically redundant.
Thanks,
JH

[jdhurst]

Virtual machines are in no way protected from threats by virtue of the host machines. There are three methods to connect a VM - bridged, NAT, or host-only. Bridged networking connects directly to the "outside" world and is most at risk. NAT networking has its own NAT'd "firewall" in the host machine and offers some protection. I don't use host-only.

So that said, if there is no access to the virtual machine (by NAT or an external router), you don't use it for email, and you check any diskettes and other files on your host machine with good anti-virus, then you are unlikely to have any problems in the virtual machine.

I have Windows 98, Windows 2000, Windows NT, DOS and several Linux VM's and I don't add antivirus protection to any of them. I have ample firewall protection externally, I don't do silly things, and I have no problems.

The key point about a VM is that it is truly independent of the Host machine in every respect.
... JD Hurst

[jwhpa]

Thanks JD.
JH

[yukit]

JD is correct. Your virtual machines are just as vulnerable as your host machine. Having said that, you can reduce the chance of getting infected by limiting the software you install & use in virtual machines.

You should keep up with security patches with your virtual machines so they are not exposed at system level. We have had virus outbreaks in the company LAN when someone poweron or resume an infected virtual machine.