To keep the virtualization flexibility, without compromise security, VMware invented security tag. By adding new tag attribute to VMs we can security policy. Adding or removing tag to VM can be done dynamically by automation, 3-Party or even manual. We can use the example we used above in which we created a security group called Servers”, but “Web rather than use a VM name containing as the criteria for this VM group membership, we can “web” attach a security tag to this VM. Create Manual Security tag: Create the security tag name: We have a user defined security tag with 0 VM count: Manual apply Security Tag: Select the servers” security tag name and right click. “web Filter from the list and choose and from list: “web” “web-sv-01a” “web-sv-02a” Now we can modify the servers” security policy to use a dynamic including criteria: “Web After this changed we have two VM count with security tag servers”. “web The security groups server’s” contains the VM names: and “Web “web-sv-01a” “web-sv-02a”.
To keep the virtualization flexibility, without compromise security, VMware invented security tag. By adding new tag attribute to VMs we can security policy. Adding or removing tag to VM can be done dynamically by automation, 3-Party or even manual. We can use the example we used above in which we created a security group called “Web Servers”, but rather than use a VM name containing “web” as the criteria for this VM group membership, we can attach a security tag to this VM. Create Manual Security tag: Create the security tag name: We have a user defined security tag with 0 VM count: Manual apply Security Tag: Select the “web servers” security tag name and right click. Filter “web” from the list and choose “web-sv-01a” and “web-sv-02a” from list: Now we can modify the “Web servers” security policy to use a dynamic including criteria: After this changed we have two VM count with security tag “web servers”. The security groups “Web server’s” contains the VM names: “web-sv-01a” and “web-sv-02a”.