glennda Posted June 20, 2012 Posted June 20, 2012 Just currently setting up a load of Windows 7 VDI machines using VMware view. I know there is a the VMware optimization guide. But apart from that does anybody have there own recommendations as to what they do and why when configuring VDI machines? Toby
jamesfed Posted June 20, 2012 Posted June 20, 2012 I always run this guy on our VDIs - AutoIt Tools: VDI Optimizer - AutoItScript No clue if it makes a real difference but I like to think so 1
glennda Posted June 20, 2012 Author Posted June 20, 2012 Will give it a go and see what i can come up with!
glennda Posted June 21, 2012 Author Posted June 21, 2012 @jamesfed - what do you do regarding AV on your VDI machines?
jamesfed Posted June 21, 2012 Posted June 21, 2012 @jamesfed - what do you do regarding AV on your VDI machines? We've got Sophos on our VDIs, it updates automatically in the background (live protection) but I've only got it to do scanning on files that are being written. Its largely fire and forget though as if you ever have a problem with a VDI desktop you just obliterate it and your VDI setup will create a new one.
glennda Posted June 21, 2012 Author Posted June 21, 2012 We've got Sophos on our VDIs, it updates automatically in the background (live protection) but I've only got it to do scanning on files that are being written. Its largely fire and forget though as if you ever have a problem with a VDI desktop you just obliterate it and your VDI setup will create a new one. That's what i'm thinking at the moment - whether its actually worth it at all? Servers are protected using AV so if client gets one - refresh desktop job done.
jamesfed Posted June 21, 2012 Posted June 21, 2012 That's what i'm thinking at the moment - whether its actually worth it at all? Servers are protected using AV so if client gets one - refresh desktop job done. Only thing is you have to know something is up with the PC to destroy it - so you could have a virus on a VDI for up to a day (if you have nightly refresh setup) during which it could be silently collecting info about every login to the PC. Its paranoia based security but hey why not Have you seen my posts about using PCI-E SSDs? With the IO you can get out of them it makes the whole ‘well AV on VDI chews through my disk IO’ argument almost pointless.
glennda Posted June 21, 2012 Author Posted June 21, 2012 Only thing is you have to know something is up with the PC to destroy it - so you could have a virus on a VDI for up to a day (if you have nightly refresh setup) during which it could be silently collecting info about every login to the PC. Its paranoia based security but hey why not Have you seen my posts about using PCI-E SSDs? With the IO you can get out of them it makes the whole ‘well AV on VDI chews through my disk IO’ argument almost pointless. Yeah I did - I'm doing 7 VDI machines - not sure the IO is going to be to much for SAS drives! I'm no longer in education!
jamesfed Posted June 21, 2012 Posted June 21, 2012 Yeah I did - I'm doing 7 VDI machines - not sure the IO is going to be to much for SAS drives! I'm no longer in education! Ahh yeah at 7 it would probably be cheaper on SAS anyways
FN-GM Posted June 21, 2012 Posted June 21, 2012 That's what i'm thinking at the moment - whether its actually worth it at all? Servers are protected using AV so if client gets one - refresh desktop job done. It wouldnt help with stuff on pen drives etc.
Axel Posted June 21, 2012 Posted June 21, 2012 ....without AV isn't there a risk of propagating the virus all around the organisation, fair point the VM's can be recreated clean - but in theory you would have to delete all VM's at the same time to eradicate the virus... ...and as viruses are a definite reality, this scenario is inevitable....?
glennda Posted June 21, 2012 Author Posted June 21, 2012 @FN-GM - this company Ban pen drives so that shouldn't be an issue (risk of data leaving site as legal firm). @Axel - its 7 machines and if the servers are protected which are the only machines not to be rebuilt. The base image wouldn't be switched on so in theory would be clean.
jamesfed Posted June 21, 2012 Posted June 21, 2012 @Axel - its 7 machines and if the servers are protected which are the only machines not to be rebuilt. The base image wouldn't be switched on so in theory would be clean. Is that only 7 PCs (which are your VDIs) in the entire firm?
glennda Posted June 21, 2012 Author Posted June 21, 2012 Is that only 7 PCs (which are your VDIs) in the entire firm? Yes - its for a small law firm
jamesfed Posted June 21, 2012 Posted June 21, 2012 Yes - its for a small law firm Interesting situation then! I'd still be concerned about key loggers/ect though which don't 'break your PC' in any obvious way.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now